Fedora 25 : 32:bind (2017-ee4b0f53cb)

Security fix for CVE-2017-3136, CVE-2017-3137 and CVE-2017-3138 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

bind security update

32:9.8.2-0.62.rc1.1 - Fix CVE-2017-3136 ISC change 4575 - Fix CVE-2017-3137 ISC change 4578...

Oracle Linux 7 : bind (ELSA-2017-1095)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1095 advisory. - Fix CVE-2017-3136 ISC change 4575 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

CentOS 7 : bind (CESA-2017:1095)

"An update for bind is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Security update for bind (important)

This update for bind fixes the following issues: CVE-2017-3137 bsc1033467: Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could have been exploited to cause a denial of service of a bind server performing recursion...

bind security update

CentOS Errata and Security Advisory CESA-2017:1095 An update for bind is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RHEL 7 : bind (RHSA-2017:1095)

"The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:1095 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named C...

Ubuntu 14.04 LTS / 16.04 LTS : Bind vulnerabilities (USN-3259-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3259-1 advisory. It was discovered that the resolver in Bind made incorrect assumptions about ordering when processing responses containing a CNAME or DNAME. ...

USN-3259-1: Bind vulnerabilities

It was discovered that the resolver in Bind made incorrect assumptions about ordering when processing responses containing a CNAME or DNAME. An attacker could use this cause a denial of service. CVE-2017-3137 Oleg Gorokhov discovered that in some situations, Bind did not properly handle DNS64...

CVE-2017-3136

A denial of service flaw was found in the way BIND handled query requests when using DNS64 with "break-dnssec yes" option. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS request. Mitigation Servers which have...

SUSE-SU-2017:1000-1 Security update for bind

This update for bind fixes the following security issues: CVE-2017-3137 bsc1033467: Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could have been exploited to cause a denial of service of a bind server performing...

SUSE-SU-2017:0999-1 Security update for bind

This update for bind fixes the following issues: CVE-2017-3137 bsc1033467: Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could have been exploited to cause a denial of service of a bind server performing recursion...

SUSE SLES12 Security Update : bind (SUSE-SU-2017:0999-1)

This update for bind fixes the following issues: CVE-2017-3137 bsc1033467: Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could have been exploited to cause a denial of service of a bind server performing recursion...

Security fix for the ALT Linux 9 package bind version 9.10.4.P8-alt1

April 12, 2017 Dmitry V. Levin 9.10.4.P8-alt1 - 9.10.4-P6 - 9.10.4-P8 fixes: CVE-2017-3136, CVE-2017-3137, CVE-2017-3138. - bind.service: pass $CHROOT to named-checkconf closes: 33239. - bind.init: check named configuration on startup...

Security fix for the ALT Linux 8 package bind version 9.10.4.P8-alt1

April 12, 2017 Dmitry V. Levin 9.10.4.P8-alt1 - 9.10.4-P6 - 9.10.4-P8 fixes: CVE-2017-3136, CVE-2017-3137, CVE-2017-3138. - bind.service: pass $CHROOT to named-checkconf closes: 33239. - bind.init: check named configuration on startup...