vulnerability

CentOS Linux: CVE-2018-5745: Low: bind security and bug fix update (Multiple Advisories)

Try Surface Command
Back to search
Severity
4
CVSS
(AV:N/AC:M/Au:S/C:N/I:N/A:P)
Published
Oct 9, 2019
Added
Nov 6, 2019
Modified
May 25, 2023

Description

"managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses managed-keys to exit due to an assertion failure if, during key rollover, a trust anchor's keys are replaced with keys which use an unsupported algorithm. Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P1, 9.12.0 -> 9.12.3-P1, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -> 9.13.6 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5745.

Solution(s)

centos-upgrade-bindcentos-upgrade-bind-chrootcentos-upgrade-bind-debuginfocentos-upgrade-bind-debugsourcecentos-upgrade-bind-develcentos-upgrade-bind-export-develcentos-upgrade-bind-export-libscentos-upgrade-bind-export-libs-debuginfocentos-upgrade-bind-libscentos-upgrade-bind-libs-debuginfocentos-upgrade-bind-libs-litecentos-upgrade-bind-libs-lite-debuginfocentos-upgrade-bind-licensecentos-upgrade-bind-lite-develcentos-upgrade-bind-pkcs11centos-upgrade-bind-pkcs11-debuginfocentos-upgrade-bind-pkcs11-develcentos-upgrade-bind-pkcs11-libscentos-upgrade-bind-pkcs11-libs-debuginfocentos-upgrade-bind-pkcs11-utilscentos-upgrade-bind-pkcs11-utils-debuginfocentos-upgrade-bind-sdbcentos-upgrade-bind-sdb-chrootcentos-upgrade-bind-sdb-debuginfocentos-upgrade-bind-utilscentos-upgrade-bind-utils-debuginfocentos-upgrade-python3-bind

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today