Skip to content
OpenAdvisories
High RHSA-2017:1583 5 CVEs

Red Hat Security Advisory: bind security and bug fix update

Published Sep 16, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 30

ReleasePackageFixed in
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::computenode bind 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::computenode bind-chroot 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::computenode bind-debuginfo 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::computenode bind-devel 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::computenode bind-libs 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::computenode bind-libs-lite 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::computenode bind-license 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::computenode bind-lite-devel 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::computenode bind-pkcs11 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::computenode bind-pkcs11-devel 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::computenode bind-pkcs11-libs 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::computenode bind-pkcs11-utils 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::computenode bind-sdb 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::computenode bind-sdb-chroot 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::computenode bind-utils 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::server bind 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::server bind-chroot 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::server bind-debuginfo 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::server bind-devel 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::server bind-libs 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::server bind-libs-lite 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::server bind-license 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::server bind-lite-devel 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::server bind-pkcs11 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::server bind-pkcs11-devel 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::server bind-pkcs11-libs 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::server bind-pkcs11-utils 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::server bind-sdb 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::server bind-sdb-chroot 32:9.9.4-29.el7_2.6
Red Hat · RHEL 7.2 EUS rhel_eus:7.2::server bind-utils 32:9.9.4-29.el7_2.6

Vulnerabilities 5

  • High 7.5
    CVE-2017-3137

    A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME

    Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurre…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-8864 EPSS 39%

    named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to …

    bind9 bind9 bind Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-9131 EPSS 41%

    named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to …

    bind9 bind9 bind Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-9147 EPSS 25%

    named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (as…

    bind9 bind9 bind Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-9444 EPSS 18%

    named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to …

    bind9 bind9 bind Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://kb.isc.org/article/AA-01434
  • article
    https://kb.isc.org/article/AA-01439
  • article
    https://kb.isc.org/article/AA-01440
  • article
    https://kb.isc.org/article/AA-01441
  • article
    https://kb.isc.org/article/AA-01466
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1389652
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1411348
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1411367
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1411377
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1441133
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1583.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-8864
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-8864
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-8864
  • report
    https://access.redhat.com/security/cve/CVE-2016-9131
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-9131
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-9131
  • report
    https://access.redhat.com/security/cve/CVE-2016-9147
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-9147
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-9147
  • report
    https://access.redhat.com/security/cve/CVE-2016-9444
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-9444
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-9444
  • report
    https://access.redhat.com/security/cve/CVE-2017-3137
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-3137
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-3137