vulnerability
RHSA-2016:0074: bind97 security update
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:L/Au:S/C:N/I:N/A:C) | Jan 20, 2016 | Jan 29, 2016 | Oct 30, 2017 |
Description
The Berkeley Internet Name Domain (BIND) is an implementation of the DomainName System (DNS) protocols. BIND includes a DNS server (named); a resolverlibrary (routines for applications to use when interfacing with DNS); andtools for verifying that the DNS server is operating correctly.A denial of service flaw was found in the way BIND processed certainmalformed Address Prefix List (APL) records. A remote, authenticatedattacker could use this flaw to cause named to crash. (CVE-2015-8704)Red Hat would like to thank ISC for reporting this issue.All bind97 users are advised to upgrade to these updated packages, whichcontain a backported patch to correct this issue. After installing theupdate, the BIND daemon (named) will be restarted automatically.
Solutions
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.