Skip to content
OpenAdvisories
High RHSA-2017:1582 3 CVEs

Red Hat Security Advisory: bind security and bug fix update

Published Sep 16, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 56

ReleasePackageFixed in
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server bind 32:9.8.2-0.17.rc1.el6_4.12
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server bind-chroot 32:9.8.2-0.17.rc1.el6_4.12
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server bind-debuginfo 32:9.8.2-0.17.rc1.el6_4.12
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server bind-devel 32:9.8.2-0.17.rc1.el6_4.12
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server bind-libs 32:9.8.2-0.17.rc1.el6_4.12
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server bind-sdb 32:9.8.2-0.17.rc1.el6_4.12
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server bind-utils 32:9.8.2-0.17.rc1.el6_4.12
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server bind 32:9.8.2-0.23.rc1.el6_5.7
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server bind-chroot 32:9.8.2-0.23.rc1.el6_5.7
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server bind-debuginfo 32:9.8.2-0.23.rc1.el6_5.7
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server bind-devel 32:9.8.2-0.23.rc1.el6_5.7
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server bind-libs 32:9.8.2-0.23.rc1.el6_5.7
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server bind-sdb 32:9.8.2-0.23.rc1.el6_5.7
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server bind-utils 32:9.8.2-0.23.rc1.el6_5.7
Red Hat · RHEL 6.6 AUS rhel_aus:6.6::server bind 32:9.8.2-0.30.rc1.el6_6.9
Red Hat · RHEL 6.6 AUS rhel_aus:6.6::server bind-chroot 32:9.8.2-0.30.rc1.el6_6.9
Red Hat · RHEL 6.6 AUS rhel_aus:6.6::server bind-debuginfo 32:9.8.2-0.30.rc1.el6_6.9
Red Hat · RHEL 6.6 AUS rhel_aus:6.6::server bind-devel 32:9.8.2-0.30.rc1.el6_6.9
Red Hat · RHEL 6.6 AUS rhel_aus:6.6::server bind-libs 32:9.8.2-0.30.rc1.el6_6.9
Red Hat · RHEL 6.6 AUS rhel_aus:6.6::server bind-sdb 32:9.8.2-0.30.rc1.el6_6.9
Red Hat · RHEL 6.6 AUS rhel_aus:6.6::server bind-utils 32:9.8.2-0.30.rc1.el6_6.9
Red Hat · RHEL 6.7 EUS rhel_eus:6.7::computenode bind 32:9.8.2-0.37.rc1.el6_7.11
Red Hat · RHEL 6.7 EUS rhel_eus:6.7::computenode bind-chroot 32:9.8.2-0.37.rc1.el6_7.11
Red Hat · RHEL 6.7 EUS rhel_eus:6.7::computenode bind-debuginfo 32:9.8.2-0.37.rc1.el6_7.11
Red Hat · RHEL 6.7 EUS rhel_eus:6.7::computenode bind-devel 32:9.8.2-0.37.rc1.el6_7.11
Red Hat · RHEL 6.7 EUS rhel_eus:6.7::computenode bind-libs 32:9.8.2-0.37.rc1.el6_7.11
Red Hat · RHEL 6.7 EUS rhel_eus:6.7::computenode bind-sdb 32:9.8.2-0.37.rc1.el6_7.11
Red Hat · RHEL 6.7 EUS rhel_eus:6.7::computenode bind-utils 32:9.8.2-0.37.rc1.el6_7.11
Red Hat · RHEL 6.7 EUS rhel_eus:6.7::server bind 32:9.8.2-0.37.rc1.el6_7.11
Red Hat · RHEL 6.7 EUS rhel_eus:6.7::server bind-chroot 32:9.8.2-0.37.rc1.el6_7.11
Red Hat · RHEL 6.7 EUS rhel_eus:6.7::server bind-debuginfo 32:9.8.2-0.37.rc1.el6_7.11
Red Hat · RHEL 6.7 EUS rhel_eus:6.7::server bind-devel 32:9.8.2-0.37.rc1.el6_7.11
Red Hat · RHEL 6.7 EUS rhel_eus:6.7::server bind-libs 32:9.8.2-0.37.rc1.el6_7.11
Red Hat · RHEL 6.7 EUS rhel_eus:6.7::server bind-sdb 32:9.8.2-0.37.rc1.el6_7.11
Red Hat · RHEL 6.7 EUS rhel_eus:6.7::server bind-utils 32:9.8.2-0.37.rc1.el6_7.11
Red Hat · Rhel Mission Critical 6 rhel_mission_critical:6.2::server bind 32:9.7.3-8.P3.el6_2.9
Red Hat · Rhel Mission Critical 6 rhel_mission_critical:6.2::server bind-chroot 32:9.7.3-8.P3.el6_2.9
Red Hat · Rhel Mission Critical 6 rhel_mission_critical:6.2::server bind-debuginfo 32:9.7.3-8.P3.el6_2.9
Red Hat · Rhel Mission Critical 6 rhel_mission_critical:6.2::server bind-devel 32:9.7.3-8.P3.el6_2.9
Red Hat · Rhel Mission Critical 6 rhel_mission_critical:6.2::server bind-libs 32:9.7.3-8.P3.el6_2.9
Red Hat · Rhel Mission Critical 6 rhel_mission_critical:6.2::server bind-sdb 32:9.7.3-8.P3.el6_2.9
Red Hat · Rhel Mission Critical 6 rhel_mission_critical:6.2::server bind-utils 32:9.7.3-8.P3.el6_2.9
Red Hat · RHEL 6.5 TUS rhel_tus:6.5::server bind 32:9.8.2-0.23.rc1.el6_5.7
Red Hat · RHEL 6.5 TUS rhel_tus:6.5::server bind-chroot 32:9.8.2-0.23.rc1.el6_5.7
Red Hat · RHEL 6.5 TUS rhel_tus:6.5::server bind-debuginfo 32:9.8.2-0.23.rc1.el6_5.7
Red Hat · RHEL 6.5 TUS rhel_tus:6.5::server bind-devel 32:9.8.2-0.23.rc1.el6_5.7
Red Hat · RHEL 6.5 TUS rhel_tus:6.5::server bind-libs 32:9.8.2-0.23.rc1.el6_5.7
Red Hat · RHEL 6.5 TUS rhel_tus:6.5::server bind-sdb 32:9.8.2-0.23.rc1.el6_5.7
Red Hat · RHEL 6.5 TUS rhel_tus:6.5::server bind-utils 32:9.8.2-0.23.rc1.el6_5.7
Red Hat · RHEL 6.6 TUS rhel_tus:6.6::server bind 32:9.8.2-0.30.rc1.el6_6.9
Red Hat · RHEL 6.6 TUS rhel_tus:6.6::server bind-chroot 32:9.8.2-0.30.rc1.el6_6.9
Red Hat · RHEL 6.6 TUS rhel_tus:6.6::server bind-debuginfo 32:9.8.2-0.30.rc1.el6_6.9
Red Hat · RHEL 6.6 TUS rhel_tus:6.6::server bind-devel 32:9.8.2-0.30.rc1.el6_6.9
Red Hat · RHEL 6.6 TUS rhel_tus:6.6::server bind-libs 32:9.8.2-0.30.rc1.el6_6.9
Red Hat · RHEL 6.6 TUS rhel_tus:6.6::server bind-sdb 32:9.8.2-0.30.rc1.el6_6.9
Red Hat · RHEL 6.6 TUS rhel_tus:6.6::server bind-utils 32:9.8.2-0.30.rc1.el6_6.9

Vulnerabilities 3

  • High 7.5
    CVE-2017-3137

    A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME

    Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurre…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-9147 EPSS 25%

    named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (as…

    bind9 bind9 bind Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-3139

    A denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker could use this flaw to …

    Red Hat BIND

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://kb.isc.org/article/AA-01466
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1441133
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1447743
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1582.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-9147
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1411367
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-9147
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-9147
  • article
    https://kb.isc.org/article/AA-01440
  • report
    https://access.redhat.com/security/cve/CVE-2017-3137
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-3137
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-3137
  • report
    https://access.redhat.com/security/cve/CVE-2017-3139
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-3139
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-3139