[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2015:1515-01 -- Redhat bind97

ID: oval:org.secpod.oval:def:501603Date: (C)2015-08-04   (M)2023-12-07
Class: PATCHFamily: unix




The Berkeley Internet Name Domain is an implementation of the Domain Name System protocols. BIND includes a DNS server ; a resolver library ; and tools for verifying that the DNS server is operating correctly. A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS request packet. Red Hat would like to thank ISC for reporting this issue. Upstream acknowledges Jonathan Foote as the original reporter. All bind97 users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, the BIND daemon will be restarted automatically.

Platform:
Red Hat Enterprise Linux 5
Product:
bind97
Reference:
RHSA-2015:1515-01
CVE-2015-5477
CVE    1
CVE-2015-5477
CPE    2
cpe:/o:redhat:enterprise_linux:5
cpe:/a:bind97:bind97

© SecPod Technologies