Skip to content
OpenAdvisories
Medium ELSA-2017-0276 1 CVE

Moderate: bind security update (Oracle Linux 7)

Published Feb 15, 2017 · Updated Feb 15, 2017

Ecosystem: Oracle Linux

Summary

[32:9.9.4-38.2]
- Fix CVE-2017-3135 (ISC change 4557)
- Fix and test caching CNAME before DNAME (ISC change 4558)

Fixed packages 14

ReleasePackageFixed in
Oracle Linux · 7 bind 32:9.9.4-38.el7_3.2
Oracle Linux · 7 bind-chroot 32:9.9.4-38.el7_3.2
Oracle Linux · 7 bind-devel 32:9.9.4-38.el7_3.2
Oracle Linux · 7 bind-libs 32:9.9.4-38.el7_3.2
Oracle Linux · 7 bind-libs-lite 32:9.9.4-38.el7_3.2
Oracle Linux · 7 bind-license 32:9.9.4-38.el7_3.2
Oracle Linux · 7 bind-lite-devel 32:9.9.4-38.el7_3.2
Oracle Linux · 7 bind-pkcs11 32:9.9.4-38.el7_3.2
Oracle Linux · 7 bind-pkcs11-devel 32:9.9.4-38.el7_3.2
Oracle Linux · 7 bind-pkcs11-libs 32:9.9.4-38.el7_3.2
Oracle Linux · 7 bind-pkcs11-utils 32:9.9.4-38.el7_3.2
Oracle Linux · 7 bind-sdb 32:9.9.4-38.el7_3.2
Oracle Linux · 7 bind-sdb-chroot 32:9.9.4-38.el7_3.2
Oracle Linux · 7 bind-utils 32:9.9.4-38.el7_3.2

Vulnerabilities 1

  • High 7.5
    CVE-2017-3135 EPSS 17%

    Combination of DNS64 and RPZ Can Lead to Crash

    Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine