bind: Broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly (CVE-2021-25214) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE --- SL7 x86_64 bind-9.11.4-26.P2.el7_9.7.x86_64.rpm bind-chroot-9.11.4-26.P2.el7_9.7.x86_64.rpm bind-debuginfo-9.11.4-26.P2.el7_9.7.i68 [More...]. Synopsis: Moderate: bind security update Advisory ID: SLSA-2021:3325-1 Issue Date: 2021-08-31 CVE Numbers: CVE-2021-25214 -- Security Fix(es): * bind: Broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly (CVE-2021-25214) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to theCVE --- SL7 x86_64 bind-9.11.4-26.P2.el7_9.7.x86_64.rpm bind-chroot-9.11.4-26.P2.el7_9.7.x86_64.rpm bind-debuginfo-9.11.4-26.P2.el7_9.7.i686.rpm bind-debuginfo-9.11.4-26.P2.el7_9.7.x86_64.rpm bind-devel-9.11.4-26.P2.el7_9.7.i686.rpm bind-devel-9.11.4-26.P2.el7_9.7.x86_64.rpm bind-export-devel-9.11.4-26.P2.el7_9.7.i686.rpm bind-export-devel-9.11.4-26.P2.el7_9.7.x86_64.rpm bind-export-libs-9.11.4-26.P2.el7_9.7.i686.rpm bind-export-libs-9.11.4-26.P2.el7_9.7.x86_64.rpm bind-libs-9.11.4-26.P2.el7_9.7.i686.rpm bind-libs-9.11.4-26.P2.el7_9.7.x86_64.rpm bind-libs-lite-9.11.4-26.P2.el7_9.7.i686.rpm bind-libs-lite-9.11.4-26.P2.el7_9.7.x86_64.rpm bind-lite-devel-9.11.4-26.P2.el7_9.7.i686.rpm bind-lite-devel-9.11.4-26.P2.el7_9.7.x86_64.rpm bind-pkcs11-9.11.4-26.P2.el7_9.7.x86_64.rpm bind-pkcs11-devel-9.11.4-26.P2.el7_9.7.i686.rpm bind-pkcs11-devel-9.11.4-26.P2.el7_9.7.x86_64.rpm bind-pkcs11-libs-9.11.4-26.P2.el7_9.7.i686.rpm bind-pkcs11-libs-9.11.4-26.P2.el7_9.7.x86_64.rpm bind-pkcs11-utils-9.11.4-26.P2.el7_9.7.x86_64.rpm bind-sdb-9.11.4-26.P2.el7_9.7.x86_64.rpm bind-sdb-chroot-9.11.4-26.P2.el7_9.7.x86_64.rpm bind-utils-9.11.4-26.P2.el7_9.7.x86_64.rpm noarch bind-license-9.11.4-26.P2.el7_9.7.noarch.rpm -- - Scientific Linux Development Team . A security alert about BIND on Scientific Linux points to potential crashes due to zone modification issues, urging system admins to apply patches to address these vulnerabilities. Bind Security Advisory, Scientific Linux Update, IXFR Issues, Zone Update Problems. . LinuxSecurity.com Team
An update that fixes three vulnerabilities is now available. . SUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:1469-1 Rating: important References: #1181495 #1185345 Cross-References: CVE-2021-25214 CVE-2021-25215 CVE-2021-25216 CVSS scores: CVE-2021-25214 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-25215 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-25216 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud 8 SUSE Linux Enterprise Server for SAP 12-SP3 SUSE Linux Enterprise Server 12-SP3-LTSS SUSE Linux Enterprise Server 12-SP3-BCL SUSE Linux Enterprise Server 12-SP2-LTSS-SAP SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON SUSE Linux Enterprise Server 12-SP2-BCL HPE Helion Openstack 8 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for bind fixes the following issues: - CVE-2021-25214: Fixed a broken inbound incremental zone update (IXFR) which could have caused named to terminate unexpectedly (bsc#1185345). - CVE-2021-25215: Fixed an assertion check which could have failed while answering queries for DNAME records that required the DNAME to be processed to resolve itself (bsc#1185345). - CVE-2021-25216: Fixed an issue where policy negotiation can be targeted by a buffer overflow attack (bsc#1185345). - MD5 warning message using host, dig, nslookup (bind-utils) with FIPS enabled (bsc#1181495). Patch Instructions: To install this SUSESecurity Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 8: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2021-1469=1 - SUSE OpenStack Cloud 8: zypper in -t patch SUSE-OpenStack-Cloud-8-2021-1469=1 - SUSE Linux Enterprise Server for SAP 12-SP3: zypper in -t patch SUSE-SLE-SAP-12-SP3-2021-1469=1 - SUSE Linux Enterprise Server 12-SP3-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2021-1469=1 - SUSE Linux Enterprise Server 12-SP3-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2021-1469=1 - SUSE Linux Enterprise Server 12-SP2-LTSS-SAP: zypper in -t patch SUSE-SLE-SERVER-12-SP2-LTSS-SAP-2021-1469=1 - SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON: zypper in -t patch SUSE-SLE-SERVER-12-SP2-LTSS-ERICSSON-2021-1469=1 - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2021-1469=1 - HPE Helion Openstack 8: zypper in -t patch HPE-Helion-OpenStack-8-2021-1469=1 Package List: - SUSE OpenStack Cloud Crowbar 8 (noarch): bind-doc-9.9.9P1-63.25.1 - SUSE OpenStack Cloud Crowbar 8 (x86_64): bind-9.9.9P1-63.25.1 bind-chrootenv-9.9.9P1-63.25.1 bind-debuginfo-9.9.9P1-63.25.1 bind-debugsource-9.9.9P1-63.25.1 bind-libs-32bit-9.9.9P1-63.25.1 bind-libs-9.9.9P1-63.25.1 bind-libs-debuginfo-32bit-9.9.9P1-63.25.1 bind-libs-debuginfo-9.9.9P1-63.25.1 bind-utils-9.9.9P1-63.25.1 bind-utils-debuginfo-9.9.9P1-63.25.1 - SUSE OpenStack Cloud 8 (x86_64): bind-9.9.9P1-63.25.1 bind-chrootenv-9.9.9P1-63.25.1 bind-debuginfo-9.9.9P1-63.25.1 bind-debugsource-9.9.9P1-63.25.1 bind-libs-32bit-9.9.9P1-63.25.1 bind-libs-9.9.9P1-63.25.1 bind-libs-debuginfo-32bit-9.9.9P1-63.25.1 bind-libs-debuginfo-9.9.9P1-63.25.1 bind-utils-9.9.9P1-63.25.1 bind-utils-debuginfo-9.9.9P1-63.25.1 - SUSE OpenStack Cloud 8 (noarch): bind-doc-9.9.9P1-63.25.1 - SUSE Linux Enterprise Server for SAP 12-SP3 (ppc64le x86_64): bind-9.9.9P1-63.25.1 bind-chrootenv-9.9.9P1-63.25.1 bind-debuginfo-9.9.9P1-63.25.1 bind-debugsource-9.9.9P1-63.25.1 bind-libs-9.9.9P1-63.25.1 bind-libs-debuginfo-9.9.9P1-63.25.1 bind-utils-9.9.9P1-63.25.1 bind-utils-debuginfo-9.9.9P1-63.25.1 - SUSE Linux Enterprise Server for SAP 12-SP3 (noarch): bind-doc-9.9.9P1-63.25.1 - SUSE Linux Enterprise Server for SAP 12-SP3 (x86_64): bind-libs-32bit-9.9.9P1-63.25.1 bind-libs-debuginfo-32bit-9.9.9P1-63.25.1 - SUSE Linux Enterprise Server 12-SP3-LTSS (aarch64 ppc64le s390x x86_64): bind-9.9.9P1-63.25.1 bind-chrootenv-9.9.9P1-63.25.1 bind-debuginfo-9.9.9P1-63.25.1 bind-debugsource-9.9.9P1-63.25.1 bind-libs-9.9.9P1-63.25.1 bind-libs-debuginfo-9.9.9P1-63.25.1 bind-utils-9.9.9P1-63.25.1 bind-utils-debuginfo-9.9.9P1-63.25.1 - SUSE Linux Enterprise Server 12-SP3-LTSS (s390x x86_64): bind-libs-32bit-9.9.9P1-63.25.1 bind-libs-debuginfo-32bit-9.9.9P1-63.25.1 - SUSE Linux Enterprise Server 12-SP3-LTSS (noarch): bind-doc-9.9.9P1-63.25.1 - SUSE Linux Enterprise Server 12-SP3-BCL (noarch): bind-doc-9.9.9P1-63.25.1 - SUSE Linux Enterprise Server 12-SP3-BCL (x86_64): bind-9.9.9P1-63.25.1 bind-chrootenv-9.9.9P1-63.25.1 bind-debuginfo-9.9.9P1-63.25.1 bind-debugsource-9.9.9P1-63.25.1 bind-libs-32bit-9.9.9P1-63.25.1 bind-libs-9.9.9P1-63.25.1 bind-libs-debuginfo-32bit-9.9.9P1-63.25.1 bind-libs-debuginfo-9.9.9P1-63.25.1 bind-utils-9.9.9P1-63.25.1 bind-utils-debuginfo-9.9.9P1-63.25.1 - SUSE Linux Enterprise Server 12-SP2-LTSS-SAP (x86_64): bind-9.9.9P1-63.25.1 bind-chrootenv-9.9.9P1-63.25.1 bind-debuginfo-9.9.9P1-63.25.1 bind-debugsource-9.9.9P1-63.25.1 bind-libs-32bit-9.9.9P1-63.25.1 bind-libs-9.9.9P1-63.25.1 bind-libs-debuginfo-32bit-9.9.9P1-63.25.1 bind-libs-debuginfo-9.9.9P1-63.25.1 bind-utils-9.9.9P1-63.25.1 bind-utils-debuginfo-9.9.9P1-63.25.1 - SUSE Linux Enterprise Server 12-SP2-LTSS-SAP (noarch): bind-doc-9.9.9P1-63.25.1 - SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON (noarch): bind-doc-9.9.9P1-63.25.1 - SUSE Linux Enterprise Server 12-SP2-LTSS-ERICSSON (x86_64): bind-9.9.9P1-63.25.1 bind-chrootenv-9.9.9P1-63.25.1 bind-debuginfo-9.9.9P1-63.25.1 bind-debugsource-9.9.9P1-63.25.1 bind-libs-32bit-9.9.9P1-63.25.1 bind-libs-9.9.9P1-63.25.1 bind-libs-debuginfo-32bit-9.9.9P1-63.25.1 bind-libs-debuginfo-9.9.9P1-63.25.1 bind-utils-9.9.9P1-63.25.1 bind-utils-debuginfo-9.9.9P1-63.25.1 - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64): bind-9.9.9P1-63.25.1 bind-chrootenv-9.9.9P1-63.25.1 bind-debuginfo-9.9.9P1-63.25.1 bind-debugsource-9.9.9P1-63.25.1 bind-libs-32bit-9.9.9P1-63.25.1 bind-libs-9.9.9P1-63.25.1 bind-libs-debuginfo-32bit-9.9.9P1-63.25.1 bind-libs-debuginfo-9.9.9P1-63.25.1 bind-utils-9.9.9P1-63.25.1 bind-utils-debuginfo-9.9.9P1-63.25.1 - SUSE Linux Enterprise Server 12-SP2-BCL (noarch): bind-doc-9.9.9P1-63.25.1 - HPE Helion Openstack 8 (noarch): bind-doc-9.9.9P1-63.25.1 - HPE Helion Openstack 8 (x86_64): bind-9.9.9P1-63.25.1 bind-chrootenv-9.9.9P1-63.25.1 bind-debuginfo-9.9.9P1-63.25.1 bind-debugsource-9.9.9P1-63.25.1 bind-libs-32bit-9.9.9P1-63.25.1 bind-libs-9.9.9P1-63.25.1 bind-libs-debuginfo-32bit-9.9.9P1-63.25.1 bind-libs-debuginfo-9.9.9P1-63.25.1 bind-utils-9.9.9P1-63.25.1 bind-utils-debuginfo-9.9.9P1-63.25.1 References: https://www.suse.com/security/cve/CVE-2021-25214.html https://www.suse.com/security/cve/CVE-2021-25215.html https://www.suse.com/security/cve/CVE-2021-25216.html https://bugzilla.suse.com/1181495 https://bugzilla.suse.com/1185345 . This release tackles a variety of concerns, enhancing the security and reliability of SUSE's bind. Discover additional details regarding the remedies provided.. SUSE Update, Bind Security, Important Patches, Zone Update Fix, Buffer Overflow Mitigation. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.