RHSA-2013:0550: bind security and enhancement update
|7||(AV:N/AC:M/Au:N/C:N/I:N/A:C)||January 24, 2013||March 02, 2013||July 03, 2017|
The Berkeley Internet Name Domain (BIND) is an implementation of theDomain Name System (DNS) protocols. BIND includes a DNS server (named); aresolver library (routines for applications to use when interfacing withDNS); and tools for verifying that the DNS server is operating correctly.DNS64 is used to automatically generate DNS records so IPv6 based clientscan access IPv4 systems through a NAT64 server.A flaw was found in the DNS64 implementation in BIND when using ResponsePolicy Zones (RPZ). If a remote attacker sent a specially-crafted query toa named server that is using RPZ rewrite rules, named could exitunexpectedly with an assertion failure. Note that DNS64 support is notenabled by default. (CVE-2012-5689)This update also adds the following enhancement:All bind users are advised to upgrade to these updated packages, whichcontain patches to correct this issue and add this enhancement. Afterinstalling the update, the BIND daemon (named) will be restartedautomatically.
Free Nexpose Download
Discover, prioritize, and remediate security risks today!
- ELSA-2013-0550 Moderate: Oracle Linux bind security and enhancement update
- Gentoo Linux: CVE-2012-5689: BIND: Denial of Service
- Amazon Linux AMI: Security patch for bind (ALAS-2013-158) (CVE-2012-5689)
- Vulnerabilities deemed not relevant on Red Hat Enterprise Linux 5
- ISC BIND: BIND 9 with DNS64 enabled can unexpectedly terminate when resolving domains in RPZ (CVE-2012-5689)
- USN-2693-1: Bind vulnerabilities
- Vulnerabilities deemed not relevant on Red Hat Enterprise Linux 4
- ELSA-2014-0043 Moderate: Oracle Linux bind security update