Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2012:1363
HistoryOct 12, 2012 - 8:50 p.m.

bind, caching security update

2012-10-1220:50:33
CentOS Project
lists.centos.org
49

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.199 Low

EPSS

Percentile

96.3%

JSON

CentOS Errata and Security Advisory CESA-2012:1363

The Berkeley Internet Name Domain (BIND) is an implementation of the
Domain Name System (DNS) protocols. BIND includes a DNS server (named); a
resolver library (routines for applications to use when interfacing with
DNS); and tools for verifying that the DNS server is operating correctly.

A flaw was found in the way BIND handled certain combinations of resource
records. A remote attacker could use this flaw to cause a recursive
resolver, or an authoritative server in certain configurations, to lockup.
(CVE-2012-5166)

Users of bind are advised to upgrade to these updated packages, which
correct this issue. After installing the update, the BIND daemon (named)
will be restarted automatically.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2012-October/081096.html
https://lists.centos.org/pipermail/centos-announce/2012-October/081100.html

Affected packages:
bind
bind-chroot
bind-devel
bind-libbind-devel
bind-libs
bind-sdb
bind-utils
caching-nameserver

Upstream details at:
https://access.redhat.com/errata/RHSA-2012:1363

OSVersionArchitecturePackageVersionFilename
CentOS5i386bind< 9.3.6-20.P1.el5_8.5bind-9.3.6-20.P1.el5_8.5.i386.rpm
CentOS5i386bind-chroot< 9.3.6-20.P1.el5_8.5bind-chroot-9.3.6-20.P1.el5_8.5.i386.rpm
CentOS5i386bind-devel< 9.3.6-20.P1.el5_8.5bind-devel-9.3.6-20.P1.el5_8.5.i386.rpm
CentOS5i386bind-libbind-devel< 9.3.6-20.P1.el5_8.5bind-libbind-devel-9.3.6-20.P1.el5_8.5.i386.rpm
CentOS5i386bind-libs< 9.3.6-20.P1.el5_8.5bind-libs-9.3.6-20.P1.el5_8.5.i386.rpm
CentOS5i386bind-sdb< 9.3.6-20.P1.el5_8.5bind-sdb-9.3.6-20.P1.el5_8.5.i386.rpm
CentOS5i386bind-utils< 9.3.6-20.P1.el5_8.5bind-utils-9.3.6-20.P1.el5_8.5.i386.rpm
CentOS5i386caching-nameserver< 9.3.6-20.P1.el5_8.5caching-nameserver-9.3.6-20.P1.el5_8.5.i386.rpm
CentOS5x86_64bind< 9.3.6-20.P1.el5_8.5bind-9.3.6-20.P1.el5_8.5.x86_64.rpm
CentOS5x86_64bind-chroot< 9.3.6-20.P1.el5_8.5bind-chroot-9.3.6-20.P1.el5_8.5.x86_64.rpm
Rows per page:
1-10 of 331

Related

nessus 42
openvas 45
oraclelinux 4
redhat 3
fedora 12
centos 1
securityvulns 4
prion 1
ubuntucve 1
debian 1
aix 1
cve 1
ubuntu 1
debiancve 1
amazon 1
osv 1
suse 4
veracode 1
freebsd 2
f5 2
freebsd_advisory 1
slackware 1
threatpost 1
gentoo 1
nessus
nessus
AIX 6.1 TL 7 : bos.net.tcp.server (U854646)
2013-03-28 00:00:00
AIX 7.1 : bos.net.tcp.server (U857842)
2013-05-01 00:00:00
CentOS 5 : bind97 (CESA-2012:1364)
2012-10-15 00:00:00
openvas
openvas
Fedora Update for dnsperf FEDORA-2012-15965
2012-10-23 00:00:00
CentOS Update for bind97 CESA-2012:1364 centos5
2012-10-16 00:00:00
FreeBSD Ports: bind99
2012-10-13 00:00:00
oraclelinux
oraclelinux
bind97 security update
2012-10-12 00:00:00
bind security update
2012-10-12 00:00:00
bind security update
2012-11-29 00:00:00
redhat
redhat
(RHSA-2012:1363) Important: bind security update
2012-10-12 00:00:00
(RHSA-2012:1364) Important: bind97 security update
2012-10-12 00:00:00
(RHSA-2012:1365) Important: bind security update
2012-10-12 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: bind-dyndb-ldap-2.0-0.3.20121009git6a86b1.fc18
2012-10-21 06:15:36
[SECURITY] Fedora 18 Update: dnsperf-2.0.0.0-3.fc18
2012-10-21 06:15:37
[SECURITY] Fedora 18 Update: dhcp-4.2.4-18.P2.fc18
2012-10-21 06:15:36
centos
centos
bind97 security update
2012-10-12 20:51:55
securityvulns
securityvulns
bind DoS
2012-10-12 00:00:00
[ MDVSA-2012:162 ] bind
2012-10-12 00:00:00
ESA-2014-016: EMC VPLEX Multiple Vulnerabilities
2014-03-31 00:00:00
prion
prion
Design/Logic Flaw
2012-10-10 21:55:00
ubuntucve
ubuntucve
CVE-2012-5166
2012-10-10 00:00:00
debian
debian
[SECURITY] [DSA 2560-1] bind9 security update
2012-10-20 19:33:44
aix
aix
Vulnerability in AIX bind
2012-10-23 10:13:27
cve
cve
CVE-2012-5166
2012-10-10 21:55:00
ubuntu
ubuntu
Bind vulnerability
2012-10-10 00:00:00
debiancve
debiancve
CVE-2012-5166
2012-10-10 21:55:00
amazon
amazon
Important: bind
2012-10-23 10:39:00
osv
osv
bind9 - denial of service
2012-10-20 00:00:00
suse
suse
bind: Specially crafted DNS data can cause a lockup in named. (important)
2012-10-19 10:08:52
Security update for bind (important)
2012-10-23 19:08:49
Security update for bind (important)
2012-11-05 19:08:49
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:58:51
freebsd
freebsd
dns/bind9* -- crash on deliberately constructed combination of records
2012-09-26 00:00:00
FreeBSD -- Multiple Denial of Service vulnerabilities with named(8)
2012-11-22 00:00:00
f5
f5
K14201 : BIND denial-of-service attack CVE-2012-5166/CVE-2012-4244
2014-08-26 00:00:00
SOL14201 - BIND denial-of-service attack CVE-2012-5166/CVE-2012-4244
2013-02-11 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-12:06.bind
2012-11-22 00:00:00
slackware
slackware
[slackware-security] bind
2012-12-07 03:50:45
threatpost
threatpost
Six Security Flaws Fixed in BIND 9.9.2
2012-12-05 16:15:32
gentoo
gentoo
BIND: Denial of service
2014-01-29 00:00:00

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.199 Low

EPSS

Percentile

96.3%

JSON
Related for CESA-2012:1363
nessus42openvas45oraclelinux4redhat3fedora12centos1securityvulns4prion1ubuntucve1debian1aix1cve1ubuntu1debiancve1amazon1osv1suse4veracode1freebsd2f52freebsd_advisory1slackware1threatpost1gentoo1