Description
A denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | BIND | shipped in Red Hat Enterprise Linux 6 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | bind +5 | 32:9.8.2-0.62.rc1.el6_9.2 | RHSA-2017:1202 |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Mission Critical 6 | bind +5 | 32:9.7.3-8.P3.el6_2.9 | RHSA-2017:1582 |
| RHEL 6.7 EUS | bind +5 | 32:9.8.2-0.37.rc1.el6_7.11 | RHSA-2017:1582 |
| RHEL 6.6 TUS | bind +5 | 32:9.8.2-0.30.rc1.el6_6.9 | RHSA-2017:1582 |
| RHEL 6.6 AUS | bind +5 | 32:9.8.2-0.30.rc1.el6_6.9 | RHSA-2017:1582 |
| RHEL 6.5 TUS | bind +5 | 32:9.8.2-0.23.rc1.el6_5.7 | RHSA-2017:1582 |
| RHEL 6.5 AUS | bind +5 | 32:9.8.2-0.23.rc1.el6_5.7 | RHSA-2017:1582 |
| RHEL 6.4 AUS | bind +5 | 32:9.8.2-0.17.rc1.el6_4.12 | RHSA-2017:1582 |
Advisories 2
- RHSA-2017:1582 Red Hat Security Advisory: bind security and bug fix update Red Hat Security Advisories (RHSA) · Jul 1, 2026
- RHSA-2017:1202 Red Hat Security Advisory: bind security update Red Hat Security Advisories (RHSA) · Jun 26, 2026