Skip to content
OpenAdvisories
High 1 exploited CVE RHSA-2016:0078 4 CVEs

Red Hat Security Advisory: bind security update

Published Sep 15, 2024 · Updated Oct 10, 2026

Fixed packages 14

ReleasePackageFixed in
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server bind 32:9.8.2-0.17.rc1.el6_4.7
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server bind-chroot 32:9.8.2-0.17.rc1.el6_4.7
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server bind-debuginfo 32:9.8.2-0.17.rc1.el6_4.7
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server bind-devel 32:9.8.2-0.17.rc1.el6_4.7
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server bind-libs 32:9.8.2-0.17.rc1.el6_4.7
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server bind-sdb 32:9.8.2-0.17.rc1.el6_4.7
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server bind-utils 32:9.8.2-0.17.rc1.el6_4.7
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server bind 32:9.8.2-0.23.rc1.el6_5.2
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server bind-chroot 32:9.8.2-0.23.rc1.el6_5.2
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server bind-debuginfo 32:9.8.2-0.23.rc1.el6_5.2
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server bind-devel 32:9.8.2-0.23.rc1.el6_5.2
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server bind-libs 32:9.8.2-0.23.rc1.el6_5.2
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server bind-sdb 32:9.8.2-0.23.rc1.el6_5.2
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server bind-utils 32:9.8.2-0.23.rc1.el6_5.2

Vulnerabilities 4

  • High 7.5
    CVE-2015-5477 Exploited Public exploit EPSS 100%

    named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service …

    KEV Oct 8, 2026
  • Unscored —
    CVE-2014-8500 EPSS 59%

    ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which …

  • Unscored —
    CVE-2015-5722 EPSS 35%

    buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial…

  • Unscored —
    CVE-2015-8000 EPSS 56%

    db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of …

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://kb.isc.org/article/AA-01216
  • article
    https://kb.isc.org/article/AA-01272
  • article
    https://kb.isc.org/article/AA-01287
  • article
    https://kb.isc.org/article/AA-01317
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1247361
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1259087
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1171912
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1291176
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0078.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-8500
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-8500
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-8500
  • article
    https://kb.isc.org/article/AA-01216/74/CVE-2014-8500%3A-A-Defect-in-Delegation-Handling-Can-Be-Exploited-to-Crash-BIND.html
  • report
    https://access.redhat.com/security/cve/CVE-2015-5477
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5477
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5477
  • article
    https://access.redhat.com/solutions/1548963
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  • report
    https://access.redhat.com/security/cve/CVE-2015-5722
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5722
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5722
  • article
    https://kb.isc.org/article/AA-01287/0
  • report
    https://access.redhat.com/security/cve/CVE-2015-8000
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-8000
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-8000