Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 580
Alerts This Week
Warning Icon 1 580

Fedora 25: FEDORA-2017-87992a0557 Critical: DoS Issues in BIND

fedora
Calendar Grey January 14, 2017
Dist Fedora Esm H88
Ubuntu 22.10 has issued important security patches for OpenSSL, addressing issues such as CVE-2022-0797 and CVE-2022-0798.
Security fix for CVE-2016-9131, CVE-2016-9147, CVE-2016-9444

Summary

BIND (Berkeley Internet Name Domain) is an implementation of the DNS

(Domain Name System) protocols. BIND includes a DNS server (named),

which resolves host names to IP addresses; a resolver library

(routines for applications to use when interfacing with DNS); and

tools for verifying that the DNS server is operating properly.

Update Information:

Security fix for CVE-2016-9131, CVE-2016-9147, CVE-2016-9444

Topics%20covered

Topics Covered

security advisory critical issue fedora bind dos dns cve fix

Change Log

References


[ 1 ] Bug #1411348 - CVE-2016-9131 bind: assertion failure while processing response to an ANY query https://bugzilla.redhat.com/show_bug.cgi?id=1411348 [ 2 ] Bug #1411367 - CVE-2016-9147 bind: assertion failure while handling a query response containing inconsistent DNSSEC information https://bugzilla.redhat.com/show_bug.cgi?id=1411367 [ 3 ] Bug #1411377 - CVE-2016-9444 bind: assertion failure while handling an unusually-formed DS record response https://bugzilla.redhat.com/show_bug.cgi?id=1411377

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade bind' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: bind
Product: Fedora 25
Version: 9.10.4
Release: 3.P5.fc25
URL: Summary : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server

Topics%20covered

Topics Covered

security advisory critical issue fedora bind dos dns cve fix

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.