Skip to content
OpenAdvisories
High RHSA-2019:1492 1 CVE

Red Hat Security Advisory: bind security update

Published Sep 16, 2024 · Updated Jun 26, 2026

Fixed packages 28

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client bind 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::client bind-chroot 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::client bind-debuginfo 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::client bind-devel 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::client bind-libs 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::client bind-sdb 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::client bind-utils 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::computenode bind 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::computenode bind-chroot 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::computenode bind-debuginfo 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::computenode bind-devel 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::computenode bind-libs 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::computenode bind-sdb 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::computenode bind-utils 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::server bind 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::server bind-chroot 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::server bind-debuginfo 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::server bind-devel 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::server bind-libs 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::server bind-sdb 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::server bind-utils 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::workstation bind 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::workstation bind-chroot 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::workstation bind-debuginfo 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::workstation bind-devel 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::workstation bind-libs 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::workstation bind-sdb 32:9.8.2-0.68.rc1.el6_10.3
Red Hat · RHEL 6 enterprise_linux:6::workstation bind-utils 32:9.8.2-0.68.rc1.el6_10.3

Vulnerabilities 1

  • High 7.5

    Limiting simultaneous TCP clients was ineffective

    By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which …

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1702541
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1492.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-5743
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-5743
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-5743
  • article
    https://kb.isc.org/docs/cve-2018-5743