Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Scientific Linux 7: SLSA-2017:0062-1 Important Denial of Service Fix

Calendar Jan 16, 2017 • User Avatar LinuxSecurity Advisories
2 - 3 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory denial of service bind security fix important scientific linux
Important: bind security update 
Date: Mon, 16 Jan 2017 16:54:06 -0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Important: bind on SL7.x x86_64
MIME-Version: 1.0
Message-ID: <20170116165406.31975.50190@slpackages.fnal.gov>

Synopsis: Important: bind security update
Advisory ID: SLSA-2017:0062-1
Issue Date: 2017-01-16
CVE Numbers: CVE-2016-9147
 CVE-2016-9131
 CVE-2016-9444
--

Security Fix(es):

* A denial of service flaw was found in the way BIND processed a response
to an ANY query. A remote attacker could use this flaw to make named exit
unexpectedly with an assertion failure via a specially crafted DNS
response. (CVE-2016-9131)

* A denial of service flaw was found in the way BIND handled a query
response containing inconsistent DNSSEC information. A remote attacker
could use this flaw to make named exit unexpectedly with an assertion
failure via a specially crafted DNS response. (CVE-2016-9147)

* A denial of service flaw was found in the way BIND handled an unusually-
formed DS record response. A remote attacker could use this flaw to make
named exit unexpectedly with an assertion failure via a specially crafted
DNS response. (CVE-2016-9444)
--

SL7
 x86_64
 bind-debuginfo-9.9.4-38.el7_3.1.i686.rpm
 bind-debuginfo-9.9.4-38.el7_3.1.x86_64.rpm
 bind-libs-9.9.4-38.el7_3.1.i686.rpm
 bind-libs-9.9.4-38.el7_3.1.x86_64.rpm
 bind-libs-lite-9.9.4-38.el7_3.1.i686.rpm
 bind-libs-lite-9.9.4-38.el7_3.1.x86_64.rpm
 bind-utils-9.9.4-38.el7_3.1.x86_64.rpm
 bind-9.9.4-38.el7_3.1.x86_64.rpm
 bind-chroot-9.9.4-38.el7_3.1.x86_64.rpm
 bind-devel-9.9.4-38.el7_3.1.i686.rpm
 bind-devel-9.9.4-38.el7_3.1.x86_64.rpm
 bind-lite-devel-9.9.4-38.el7_3.1.i686.rpm
 bind-lite-devel-9.9.4-38.el7_3.1.x86_64.rpm
 bind-pkcs11-9.9.4-38.el7_3.1.x86_64.rpm
 bind-pkcs11-devel-9.9.4-38.el7_3.1.i686.rpm
 bind-pkcs11-devel-9.9.4-38.el7_3.1.x86_64.rpm
 bind-pkcs11-libs-9.9.4-38.el7_3.1.i686.rpm
 bind-pkcs11-libs-9.9.4-38.el7_3.1.x86_64.rpm
 bind-pkcs11-utils-9.9.4-38.el7_3.1.x86_64.rpm
 bind-sdb-9.9.4-38.el7_3.1.x86_64.rpm
 bind-sdb-chroot-9.9.4-38.el7_3.1.x86_64.rpm
 noarch
 bind-license-9.9.4-38.el7_3.1.noarch.rpm

- Scientific Linux Development Team