Skip to content
OpenAdvisories
High RHSA-2017:1679 2 CVEs

Red Hat Security Advisory: bind security and bug fix update

Published Sep 16, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 28

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client bind 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::client bind-chroot 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::client bind-debuginfo 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::client bind-devel 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::client bind-libs 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::client bind-sdb 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::client bind-utils 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::computenode bind 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::computenode bind-chroot 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::computenode bind-debuginfo 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::computenode bind-devel 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::computenode bind-libs 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::computenode bind-sdb 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::computenode bind-utils 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::server bind 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::server bind-chroot 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::server bind-debuginfo 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::server bind-devel 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::server bind-libs 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::server bind-sdb 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::server bind-utils 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::workstation bind 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::workstation bind-chroot 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::workstation bind-debuginfo 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::workstation bind-devel 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::workstation bind-libs 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::workstation bind-sdb 32:9.8.2-0.62.rc1.el6_9.4
Red Hat · RHEL 6 enterprise_linux:6::workstation bind-utils 32:9.8.2-0.62.rc1.el6_9.4

Vulnerabilities 2

  • High 7.5
    CVE-2017-3143 Public exploit EPSS 18%

    An error in TSIG authentication can permit unauthorized dynamic updates

    An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BI…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2017-3142

    An error in TSIG authentication can permit unauthorized zone transfers

    An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies …

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://kb.isc.org/article/AA-01503
  • article
    https://kb.isc.org/article/AA-01504
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1466189
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1466193
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1679.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-3142
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-3142
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-3142
  • report
    https://access.redhat.com/security/cve/CVE-2017-3143
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-3143
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-3143