Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Red Hat BIND can be exploited to run code
published 2 years ago
Summary
The BIND name server packages for Red Hat (including the standard, chroot, libraries, utilities and debug versions) contain a flaw that could let an attacker send specially crafted network data and cause the server to execute malicious code. This could lead to unauthorized access or disruption of services that rely on DNS. Apply the Red Hat security update for the BIND packages as soon as possible.
What to do
- Update redhat bind to version 32:9.8.2-0.17.rc1.el6_4.7.
- Update redhat bind-chroot to version 32:9.8.2-0.17.rc1.el6_4.7.
- Update redhat bind-debuginfo to version 32:9.8.2-0.17.rc1.el6_4.7.
- Update redhat bind-libs to version 32:9.8.2-0.17.rc1.el6_4.7.
- Update redhat bind-utils to version 32:9.8.2-0.17.rc1.el6_4.7.
- Update redhat bind to version 32:9.8.2-0.23.rc1.el6_5.2.
- Update redhat bind-chroot to version 32:9.8.2-0.23.rc1.el6_5.2.
- Update redhat bind-debuginfo to version 32:9.8.2-0.23.rc1.el6_5.2.
- Update redhat bind-libs to version 32:9.8.2-0.23.rc1.el6_5.2.
- Update redhat bind-utils to version 32:9.8.2-0.23.rc1.el6_5.2.
- Update redhat bind-devel to version 32:9.8.2-0.17.rc1.el6_4.7.
- Update redhat bind-sdb to version 32:9.8.2-0.17.rc1.el6_4.7.
- Update redhat bind-devel to version 32:9.8.2-0.23.rc1.el6_5.2.
- Update redhat bind-sdb to version 32:9.8.2-0.23.rc1.el6_5.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_aus:6.4::server | redhat | bind |
< 32:9.8.2-0.17.rc1.el6_4.7 Fix: upgrade to 32:9.8.2-0.17.rc1.el6_4.7
|
| Red Hat:rhel_aus:6.4::server | redhat | bind-chroot |
< 32:9.8.2-0.17.rc1.el6_4.7 Fix: upgrade to 32:9.8.2-0.17.rc1.el6_4.7
|
| Red Hat:rhel_aus:6.4::server | redhat | bind-debuginfo |
< 32:9.8.2-0.17.rc1.el6_4.7 Fix: upgrade to 32:9.8.2-0.17.rc1.el6_4.7
|
| Red Hat:rhel_aus:6.4::server | redhat | bind-libs |
< 32:9.8.2-0.17.rc1.el6_4.7 Fix: upgrade to 32:9.8.2-0.17.rc1.el6_4.7
|
| Red Hat:rhel_aus:6.4::server | redhat | bind-utils |
< 32:9.8.2-0.17.rc1.el6_4.7 Fix: upgrade to 32:9.8.2-0.17.rc1.el6_4.7
|
| Red Hat:rhel_aus:6.5::server | redhat | bind |
< 32:9.8.2-0.23.rc1.el6_5.2 Fix: upgrade to 32:9.8.2-0.23.rc1.el6_5.2
|
| Red Hat:rhel_aus:6.5::server | redhat | bind-chroot |
< 32:9.8.2-0.23.rc1.el6_5.2 Fix: upgrade to 32:9.8.2-0.23.rc1.el6_5.2
|
| Red Hat:rhel_aus:6.5::server | redhat | bind-debuginfo |
< 32:9.8.2-0.23.rc1.el6_5.2 Fix: upgrade to 32:9.8.2-0.23.rc1.el6_5.2
|
| Red Hat:rhel_aus:6.5::server | redhat | bind-libs |
< 32:9.8.2-0.23.rc1.el6_5.2 Fix: upgrade to 32:9.8.2-0.23.rc1.el6_5.2
|
| Red Hat:rhel_aus:6.5::server | redhat | bind-utils |
< 32:9.8.2-0.23.rc1.el6_5.2 Fix: upgrade to 32:9.8.2-0.23.rc1.el6_5.2
|
| Red Hat:rhel_aus:6.4::server | redhat | bind-devel |
< 32:9.8.2-0.17.rc1.el6_4.7 Fix: upgrade to 32:9.8.2-0.17.rc1.el6_4.7
|
| Red Hat:rhel_aus:6.4::server | redhat | bind-sdb |
< 32:9.8.2-0.17.rc1.el6_4.7 Fix: upgrade to 32:9.8.2-0.17.rc1.el6_4.7
|
| Red Hat:rhel_aus:6.5::server | redhat | bind-devel |
< 32:9.8.2-0.23.rc1.el6_5.2 Fix: upgrade to 32:9.8.2-0.23.rc1.el6_5.2
|
| Red Hat:rhel_aus:6.5::server | redhat | bind-sdb |
< 32:9.8.2-0.23.rc1.el6_5.2 Fix: upgrade to 32:9.8.2-0.23.rc1.el6_5.2
|
Original advisory text
Red Hat Security Advisory: bind security update
References
- https://access.redhat.com/errata/RHSA-2016:0078 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://kb.isc.org/article/AA-01216 Third Party Advisory
- https://kb.isc.org/article/AA-01272 Third Party Advisory
- https://kb.isc.org/article/AA-01287 Third Party Advisory
- https://kb.isc.org/article/AA-01317 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1247361 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1259087 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1171912 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1291176 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0078.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2014-8500 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2014-8500 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2014-8500 Vendor Advisory
- https://kb.isc.org/article/AA-01216/74/CVE-2014-8500%3A-A-Defect-in-Delegation-H... Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2015-5477 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2015-5477 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2015-5477 Vendor Advisory
- https://access.redhat.com/solutions/1548963 Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2015-5722 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2015-5722 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2015-5722 Vendor Advisory
- https://kb.isc.org/article/AA-01287/0 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2015-8000 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2015-8000 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2015-8000 Vendor Advisory
Timeline
Published15 Sep 2024
Updated10 Oct 2026
First seen10 Oct 2026
Sources
RHSA-2016:0078 · OSV
Track software like this
Free during beta