Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 550
Alerts This Week
Warning Icon 1 550

Scientific Linux: SLSA-2017:1202-1 Critical: BIND Denial Of Service

Calendar May 08, 2017 • User Avatar LinuxSecurity Advisories
1 - 2 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory denial of service security issue update bind Scientific Linux
Important: bind security update 
Date: Mon, 8 May 2017 15:36:39 -0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Important: bind on SL6.x i386/x86_64

Synopsis: Important: bind security update
Advisory ID: SLSA-2017:1202-1
Issue Date: 2017-05-08
CVE Numbers: CVE-2017-3139
--

Security Fix(es):

* A denial of service flaw was found in the way BIND handled DNSSEC
validation. A remote attacker could use this flaw to make named exit
unexpectedly with an assertion failure via a specially crafted DNS
response. (CVE-2017-3139)

Note: This issue affected only the BIND versions as shipped with EL6.
--

SL6
 x86_64
 bind-debuginfo-9.8.2-0.62.rc1.el6_9.2.i686.rpm
 bind-debuginfo-9.8.2-0.62.rc1.el6_9.2.x86_64.rpm
 bind-libs-9.8.2-0.62.rc1.el6_9.2.i686.rpm
 bind-libs-9.8.2-0.62.rc1.el6_9.2.x86_64.rpm
 bind-utils-9.8.2-0.62.rc1.el6_9.2.x86_64.rpm
 bind-9.8.2-0.62.rc1.el6_9.2.x86_64.rpm
 bind-chroot-9.8.2-0.62.rc1.el6_9.2.x86_64.rpm
 bind-devel-9.8.2-0.62.rc1.el6_9.2.i686.rpm
 bind-devel-9.8.2-0.62.rc1.el6_9.2.x86_64.rpm
 bind-sdb-9.8.2-0.62.rc1.el6_9.2.x86_64.rpm
 i386
 bind-debuginfo-9.8.2-0.62.rc1.el6_9.2.i686.rpm
 bind-libs-9.8.2-0.62.rc1.el6_9.2.i686.rpm
 bind-utils-9.8.2-0.62.rc1.el6_9.2.i686.rpm
 bind-9.8.2-0.62.rc1.el6_9.2.i686.rpm
 bind-chroot-9.8.2-0.62.rc1.el6_9.2.i686.rpm
 bind-devel-9.8.2-0.62.rc1.el6_9.2.i686.rpm
 bind-sdb-9.8.2-0.62.rc1.el6_9.2.i686.rpm

- Scientific Linux Development Team