Skip to content
OpenAdvisories
High RHSA-2020:1061 3 CVEs

Red Hat Security Advisory: bind security and bug fix update

Published Sep 16, 2024 · Updated Sep 2, 2026

Ecosystem: Red Hat

Fixed packages 68

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client bind 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::client bind-chroot 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::client bind-debuginfo 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::client bind-devel 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::client bind-export-devel 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::client bind-export-libs 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::client bind-libs 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::client bind-libs-lite 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::client bind-license 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::client bind-lite-devel 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::client bind-pkcs11 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::client bind-pkcs11-devel 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::client bind-pkcs11-libs 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::client bind-pkcs11-utils 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::client bind-sdb 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::client bind-sdb-chroot 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::client bind-utils 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode bind 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-chroot 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-debuginfo 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-devel 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-export-devel 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-export-libs 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-libs 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-libs-lite 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-license 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-lite-devel 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-pkcs11 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-pkcs11-devel 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-pkcs11-libs 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-pkcs11-utils 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-sdb 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-sdb-chroot 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-utils 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::server bind 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::server bind-chroot 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::server bind-debuginfo 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::server bind-devel 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::server bind-export-devel 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::server bind-export-libs 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::server bind-libs 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::server bind-libs-lite 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::server bind-license 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::server bind-lite-devel 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::server bind-pkcs11 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::server bind-pkcs11-devel 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::server bind-pkcs11-libs 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::server bind-pkcs11-utils 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::server bind-sdb 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::server bind-sdb-chroot 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::server bind-utils 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation bind 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-chroot 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-debuginfo 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-devel 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-export-devel 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-export-libs 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-libs 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-libs-lite 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-license 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-lite-devel 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-pkcs11 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-pkcs11-devel 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-pkcs11-libs 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-pkcs11-utils 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-sdb 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-sdb-chroot 32:9.11.4-16.P2.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-utils 32:9.11.4-16.P2.el7

Vulnerabilities 3

  • High 7.5
    CVE-2019-6477

    TCP-pipelined queries can bypass tcp-clients limit

    With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query received via UDP or via TCP without pipelining enabled. A client using a TCP-pipelined connection to a server could consume more resources than t…

    ISC BIND9 bind9 bind9 Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2019-6465

    Zone transfer controls for writable DLZ zones were not effective

    Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P2, 9.12.0 -> 9.12.3-P2, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine
  • Medium 4.9
    CVE-2018-5745

    An assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys

    "managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses m…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1679303
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1679304
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1743572
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1753259
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1773617
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1061.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-5745
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-5745
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-5745
  • article
    https://kb.isc.org/docs/cve-2018-5745
  • report
    https://access.redhat.com/security/cve/CVE-2019-6465
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-6465
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-6465
  • article
    https://kb.isc.org/docs/cve-2019-6465
  • report
    https://access.redhat.com/security/cve/CVE-2019-6477
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-6477
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-6477
  • article
    https://kb.isc.org/docs/cve-2019-6477