Skip to content
OpenAdvisories
High RHSA-2017:1095 2 CVEs

Red Hat Security Advisory: bind security update

Published Sep 16, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 60

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client bind 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::client bind-chroot 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::client bind-debuginfo 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::client bind-devel 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::client bind-libs 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::client bind-libs-lite 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::client bind-license 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::client bind-lite-devel 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::client bind-pkcs11 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::client bind-pkcs11-devel 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::client bind-pkcs11-libs 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::client bind-pkcs11-utils 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::client bind-sdb 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::client bind-sdb-chroot 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::client bind-utils 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::computenode bind 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-chroot 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-debuginfo 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-devel 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-libs 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-libs-lite 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-license 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-lite-devel 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-pkcs11 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-pkcs11-devel 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-pkcs11-libs 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-pkcs11-utils 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-sdb 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-sdb-chroot 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-utils 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::server bind 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::server bind-chroot 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::server bind-debuginfo 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::server bind-devel 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::server bind-libs 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::server bind-libs-lite 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::server bind-license 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::server bind-lite-devel 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::server bind-pkcs11 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::server bind-pkcs11-devel 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::server bind-pkcs11-libs 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::server bind-pkcs11-utils 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::server bind-sdb 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::server bind-sdb-chroot 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::server bind-utils 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::workstation bind 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-chroot 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-debuginfo 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-devel 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-libs 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-libs-lite 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-license 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-lite-devel 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-pkcs11 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-pkcs11-devel 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-pkcs11-libs 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-pkcs11-utils 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-sdb 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-sdb-chroot 32:9.9.4-38.el7_3.3
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-utils 32:9.9.4-38.el7_3.3

Vulnerabilities 2

  • High 7.5
    CVE-2017-3137

    A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME

    Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurre…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine
  • Medium 5.9
    CVE-2017-3136 EPSS 11%

    An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"

    A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS6…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://kb.isc.org/article/AA-01465
  • article
    https://kb.isc.org/article/AA-01466
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1441125
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1441133
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1095.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-3136
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-3136
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-3136
  • report
    https://access.redhat.com/security/cve/CVE-2017-3137
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-3137
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-3137