Skip to content
OpenAdvisories
High ELSA-2018-2570 1 CVE

Important: bind security update (Oracle Linux 7)

Published Aug 27, 2018 · Updated Aug 27, 2018

Ecosystem: Oracle Linux

Summary

[32:9.9.4-61.1]
- Fix CVE-2018-5740

Fixed packages 14

ReleasePackageFixed in
Oracle Linux · 7 bind 32:9.9.4-61.el7_5.1
Oracle Linux · 7 bind-chroot 32:9.9.4-61.el7_5.1
Oracle Linux · 7 bind-devel 32:9.9.4-61.el7_5.1
Oracle Linux · 7 bind-libs 32:9.9.4-61.el7_5.1
Oracle Linux · 7 bind-libs-lite 32:9.9.4-61.el7_5.1
Oracle Linux · 7 bind-license 32:9.9.4-61.el7_5.1
Oracle Linux · 7 bind-lite-devel 32:9.9.4-61.el7_5.1
Oracle Linux · 7 bind-pkcs11 32:9.9.4-61.el7_5.1
Oracle Linux · 7 bind-pkcs11-devel 32:9.9.4-61.el7_5.1
Oracle Linux · 7 bind-pkcs11-libs 32:9.9.4-61.el7_5.1
Oracle Linux · 7 bind-pkcs11-utils 32:9.9.4-61.el7_5.1
Oracle Linux · 7 bind-sdb 32:9.9.4-61.el7_5.1
Oracle Linux · 7 bind-sdb-chroot 32:9.9.4-61.el7_5.1
Oracle Linux · 7 bind-utils 32:9.9.4-61.el7_5.1

Vulnerabilities 1

  • High 7.5
    CVE-2018-5740 Public exploit EPSS 60%

    A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named

    "deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine