Summary
[32:9.9.4-38.3]
- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | bind | 32:9.9.4-38.el7_3.3 |
| Oracle Linux · 7 | bind-chroot | 32:9.9.4-38.el7_3.3 |
| Oracle Linux · 7 | bind-devel | 32:9.9.4-38.el7_3.3 |
| Oracle Linux · 7 | bind-libs | 32:9.9.4-38.el7_3.3 |
| Oracle Linux · 7 | bind-libs-lite | 32:9.9.4-38.el7_3.3 |
| Oracle Linux · 7 | bind-license | 32:9.9.4-38.el7_3.3 |
| Oracle Linux · 7 | bind-lite-devel | 32:9.9.4-38.el7_3.3 |
| Oracle Linux · 7 | bind-pkcs11 | 32:9.9.4-38.el7_3.3 |
| Oracle Linux · 7 | bind-pkcs11-devel | 32:9.9.4-38.el7_3.3 |
| Oracle Linux · 7 | bind-pkcs11-libs | 32:9.9.4-38.el7_3.3 |
| Oracle Linux · 7 | bind-pkcs11-utils | 32:9.9.4-38.el7_3.3 |
| Oracle Linux · 7 | bind-sdb | 32:9.9.4-38.el7_3.3 |
| Oracle Linux · 7 | bind-sdb-chroot | 32:9.9.4-38.el7_3.3 |
| Oracle Linux · 7 | bind-utils | 32:9.9.4-38.el7_3.3 |
Vulnerabilities 2
-
High 7.5
A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME
Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurre…
-
Medium 5.9CVE-2017-3136 EPSS 11%
An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"
A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS6…