Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

SUSE: SUSE-SU-2016:1541-1 Critical: Bind Denial Of Service

suse
Calendar Grey June 10, 2016
Scroller Suse
Important SUSE upgrade tackles DNS vulnerabilities boosting system reliability and protection for clients.
An update that fixes two vulnerabilities is now available

Summary

This update for bind fixes two assertion failures that could lead to a remote denial of service attack: - CVE-2016-1285: An error when parsing signature records for DNAME can lead to named exiting due to an assertion failure. (bsc#970072) - CVE-2016-1286: An error when parsing signature records for DNAME records having specific properties can lead to named exiting due to an assertion failure in resolver.c or db.c. (bsc#970073) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 5: zypper in -t patch sleclo50sp3-bind-12608=1 - SUSE Manager Proxy 2.1: zypper in -t patch slemap21-bind-12608=1 - SUSE Manager 2.1: zypper in -t patch sleman21-bind-12608=1 To bring your system up-to-date, use "zypper patch".

Topics%20covered

Topics Covered

security advisory denial of service bind patch important suse manager suse openstack

References

#970072 #970073

Cross- CVE-2016-1285 CVE-2016-1286

Affected Products:

SUSE OpenStack Cloud 5

SUSE Manager Proxy 2.1

SUSE Manager 2.1

https://www.suse.com/security/cve/CVE-2016-1285.html

https://www.suse.com/security/cve/CVE-2016-1286.html

https://bugzilla.suse.com/970072

https://bugzilla.suse.com/970073

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:1541-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service bind patch important suse manager suse openstack

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.