Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Scientific Linux SL7.x Important: bind Denial Of Service Fixes

Calendar Apr 19, 2017 • User Avatar LinuxSecurity Advisories
2 - 3 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory bind security fix dos threat important update Scientific Linux
Important: bind security update 
Date: Wed, 19 Apr 2017 13:59:07 -0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Important: bind on SL7.x x86_64
MIME-Version: 1.0
Message-ID: <20170419135907.12309.32397@slpackages.fnal.gov>

Synopsis: Important: bind security update
Advisory ID: SLSA-2017:1095-1
Issue Date: 2017-04-19
CVE Numbers: CVE-2017-3136
 CVE-2017-3137
--

Security Fix(es):

* A denial of service flaw was found in the way BIND handled a query
response containing CNAME or DNAME resource records in an unusual order. A
remote attacker could use this flaw to make named exit unexpectedly with
an assertion failure via a specially crafted DNS response. (CVE-2017-3137)

* A denial of service flaw was found in the way BIND handled query
requests when using DNS64 with "break-dnssec yes" option. A remote
attacker could use this flaw to make named exit unexpectedly with an
assertion failure via a specially crafted DNS request. (CVE-2017-3136)
--

SL7
 x86_64
 bind-debuginfo-9.9.4-38.el7_3.3.i686.rpm
 bind-debuginfo-9.9.4-38.el7_3.3.x86_64.rpm
 bind-libs-9.9.4-38.el7_3.3.i686.rpm
 bind-libs-9.9.4-38.el7_3.3.x86_64.rpm
 bind-libs-lite-9.9.4-38.el7_3.3.i686.rpm
 bind-libs-lite-9.9.4-38.el7_3.3.x86_64.rpm
 bind-utils-9.9.4-38.el7_3.3.x86_64.rpm
 bind-9.9.4-38.el7_3.3.x86_64.rpm
 bind-chroot-9.9.4-38.el7_3.3.x86_64.rpm
 bind-devel-9.9.4-38.el7_3.3.i686.rpm
 bind-devel-9.9.4-38.el7_3.3.x86_64.rpm
 bind-lite-devel-9.9.4-38.el7_3.3.i686.rpm
 bind-lite-devel-9.9.4-38.el7_3.3.x86_64.rpm
 bind-pkcs11-9.9.4-38.el7_3.3.x86_64.rpm
 bind-pkcs11-devel-9.9.4-38.el7_3.3.i686.rpm
 bind-pkcs11-devel-9.9.4-38.el7_3.3.x86_64.rpm
 bind-pkcs11-libs-9.9.4-38.el7_3.3.i686.rpm
 bind-pkcs11-libs-9.9.4-38.el7_3.3.x86_64.rpm
 bind-pkcs11-utils-9.9.4-38.el7_3.3.x86_64.rpm
 bind-sdb-9.9.4-38.el7_3.3.x86_64.rpm
 bind-sdb-chroot-9.9.4-38.el7_3.3.x86_64.rpm
 noarch
 bind-license-9.9.4-38.el7_3.3.noarch.rpm

- Scientific Linux Development Team