Skip to content
OpenAdvisories
Unscored RHSA-2008:0300 2 CVEs

Red Hat Security Advisory: bind security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client bind 30:9.3.4-6.P1.el5
Red Hat · RHEL 5 enterprise_linux:5::client bind-debuginfo 30:9.3.4-6.P1.el5
Red Hat · RHEL 5 enterprise_linux:5::client bind-libs 30:9.3.4-6.P1.el5
Red Hat · RHEL 5 enterprise_linux:5::client bind-sdb 30:9.3.4-6.P1.el5
Red Hat · RHEL 5 enterprise_linux:5::client bind-utils 30:9.3.4-6.P1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation bind 30:9.3.4-6.P1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation bind-chroot 30:9.3.4-6.P1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation bind-debuginfo 30:9.3.4-6.P1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation bind-devel 30:9.3.4-6.P1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation bind-libbind-devel 30:9.3.4-6.P1.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation caching-nameserver 30:9.3.4-6.P1.el5
Red Hat · RHEL 5 enterprise_linux:5::server bind 30:9.3.4-6.P1.el5
Red Hat · RHEL 5 enterprise_linux:5::server bind-chroot 30:9.3.4-6.P1.el5
Red Hat · RHEL 5 enterprise_linux:5::server bind-debuginfo 30:9.3.4-6.P1.el5
Red Hat · RHEL 5 enterprise_linux:5::server bind-devel 30:9.3.4-6.P1.el5
Red Hat · RHEL 5 enterprise_linux:5::server bind-libbind-devel 30:9.3.4-6.P1.el5
Red Hat · RHEL 5 enterprise_linux:5::server bind-libs 30:9.3.4-6.P1.el5
Red Hat · RHEL 5 enterprise_linux:5::server bind-sdb 30:9.3.4-6.P1.el5
Red Hat · RHEL 5 enterprise_linux:5::server bind-utils 30:9.3.4-6.P1.el5
Red Hat · RHEL 5 enterprise_linux:5::server caching-nameserver 30:9.3.4-6.P1.el5

Vulnerabilities 2

  • Unscored —
    CVE-2007-6283

    Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows…

  • Unscored —
    CVE-2008-0122 EPSS 12%

    Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 …

    glibc Debian

References

  • article
    http://www.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=240788
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=240876
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=242734
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=247486
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=250118
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=250744
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=250901
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=251528
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=252334
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=253537
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=353741
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=363531
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=419421
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=423741
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=429149
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0300.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-6283
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-6283
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-6283
  • report
    https://access.redhat.com/security/cve/CVE-2008-0122
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0122
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0122