RHSA-2011:1458

Executive Summary

Summary
Title	bind security update

Informations
Name	RHSA-2011:1458	First vendor Publication	2011-11-17
Vendor	RedHat	Last vendor Modification	2011-11-17
Severity (Vendor)	Important	Revision	01

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P)
Cvss Base Score	5	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Problem Description:

Updated bind packages that fix one security issue are now available for Red
Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having
important security impact. A Common Vulnerability Scoring System (CVSS)
base score, which gives a detailed severity rating, is available from the
CVE link in the References section.

2. Relevant releases/architectures:

RHEL Desktop Workstation (v. 5 client) - i386, x86_64
Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64
Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64
Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64
Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64
Red Hat Enterprise Linux HPC Node (v. 6) - x86_64
Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64
Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64
Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64
Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64
Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64

3. Description:

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain
Name System (DNS) protocols. BIND includes a DNS server (named); a resolver
library (routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating correctly.

A flaw was discovered in the way BIND handled certain DNS queries, which
caused it to cache an invalid record. A remote attacker could use this
flaw to send repeated queries for this invalid record, causing the
resolvers to exit unexpectedly due to a failed assertion. (CVE-2011-4313)

Users of bind are advised to upgrade to these updated packages, which
resolve this issue. After installing the update, the BIND daemon (named)
will be restarted automatically.

4. Solution:

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

5. Bugs fixed (http://bugzilla.redhat.com/):

754398 - CVE-2011-4313 bind: Remote denial of service against recursive servers via logging negative cache entry

Original Source

Url : https://rhn.redhat.com/errata/RHSA-2011-1458.html

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:14343

Oval ID:	oval:org.mitre.oval:def:14343
Title:	HP-UX Running BIND, Remote Denial of Service (DoS)
Description:	query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4313	Version:	4
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02729 HP Release B.11.23 AND filesets tests InternetSrvcs.INETSVCS-INETD is installed AND InternetSrvcs.INETSVCS-RUN is installed AND InternetSrvcs.INETSVCS2-RUN is installed AND NOT Patch PHNE_42727 is installed OR Criteria meets HP Security Bulletin HPSBUX02729 HP Release B.11.23 AND filesets tests BindUpgrade.BIND-UPGRADE version is less than C.9.3.2.9.1 AND BindUpgrade.BIND2-UPGRADE version is less than C.9.3.2.9.1 OR Criteria meets HP Security Bulletin HPSBUX02729 HP Release B.11.11 AND BINDv920.INETSVCS-BIND version is less than B.11.11.01.017 OR Criteria meets HP Security Bulletin HPSBUX02729 HP Release B.11.11 AND BindUpgrade.BIND-UPGRADE version is less than C.9.3.2.9.1 OR Criteria meets HP Security Bulletin HPSBUX02729 HP-UX B.11.31 AND filesets tests NameService.BIND-AUX version is less than C.9.3.2.10.1 AND NameService.BIND-RUN version is less than C.9.3.2.10.1

CPE : Common Platform Enumeration

Type	Description	Count
Application	Isc Bind cpe:/a:isc:bind:9.9.0:a3 cpe:/a:isc:bind:9.9.0:a1 cpe:/a:isc:bind:9.9.0:b1 cpe:/a:isc:bind:9.9.0:a2 cpe:/a:isc:bind:9.8.1:rc1 cpe:/a:isc:bind:9.8.1:b1 cpe:/a:isc:bind:9.8.1:b3 cpe:/a:isc:bind:9.8.1 cpe:/a:isc:bind:9.8.1:b2 cpe:/a:isc:bind:9.8.0:p4 cpe:/a:isc:bind:9.8.0:p2 cpe:/a:isc:bind:9.8.0:rc1 cpe:/a:isc:bind:9.8.0 cpe:/a:isc:bind:9.8.0:b1 cpe:/a:isc:bind:9.8.0:p1 cpe:/a:isc:bind:9.8.0:a1 cpe:/a:isc:bind:9.7.4b1 cpe:/a:isc:bind:9.7.4 cpe:/a:isc:bind:9.7.4:b1 cpe:/a:isc:bind:9.7.3:b1 cpe:/a:isc:bind:9.7.3:p1 cpe:/a:isc:bind:9.7.3 cpe:/a:isc:bind:9.7.3:rc1 cpe:/a:isc:bind:9.7.2rc1 cpe:/a:isc:bind:9.7.2b1 cpe:/a:isc:bind:9.7.2-p3 cpe:/a:isc:bind:9.7.2-p2 cpe:/a:isc:bind:9.7.2-p1 cpe:/a:isc:bind:9.7.2:p1 cpe:/a:isc:bind:9.7.2:p3 cpe:/a:isc:bind:9.7.2:p2 cpe:/a:isc:bind:9.7.2:rc1 cpe:/a:isc:bind:9.7.2 cpe:/a:isc:bind:9.7.1b1 cpe:/a:isc:bind:9.7.1-p2 cpe:/a:isc:bind:9.7.1-p1 cpe:/a:isc:bind:9.7.1 cpe:/a:isc:bind:9.7.1:p2 cpe:/a:isc:bind:9.7.1:p1 cpe:/a:isc:bind:9.7.1:rc1 cpe:/a:isc:bind:9.7.0b3 cpe:/a:isc:bind:9.7.0b2 cpe:/a:isc:bind:9.7.0b1 cpe:/a:isc:bind:9.7.0a3 cpe:/a:isc:bind:9.7.0a2 cpe:/a:isc:bind:9.7.0a1 cpe:/a:isc:bind:9.7.0-p2 cpe:/a:isc:bind:9.7.0-p1 cpe:/a:isc:bind:9.7.0:p1 cpe:/a:isc:bind:9.7.0 cpe:/a:isc:bind:9.7.0:p2 cpe:/a:isc:bind:9.7.0:rc1 cpe:/a:isc:bind:9.7.0:beta cpe:/a:isc:bind:9.7.0:rc2 cpe:/a:isc:bind:9.6.3b1 cpe:/a:isc:bind:9.6.3:rc1 cpe:/a:isc:bind:9.6.3 cpe:/a:isc:bind:9.6.2b1 cpe:/a:isc:bind:9.6.2-p3 cpe:/a:isc:bind:9.6.2-p2 cpe:/a:isc:bind:9.6.2-p1 cpe:/a:isc:bind:9.6.2 cpe:/a:isc:bind:9.6.2:rc1 cpe:/a:isc:bind:9.6.1b1 cpe:/a:isc:bind:9.6.1:p3 cpe:/a:isc:bind:9.6.1 cpe:/a:isc:bind:9.6.1:p1 cpe:/a:isc:bind:9.6.1:p2 cpe:/a:isc:bind:9.6.1:rc1 cpe:/a:isc:bind:9.6.0b1 cpe:/a:isc:bind:9.6.0a1 cpe:/a:isc:bind:9.6.0:rc1 cpe:/a:isc:bind:9.6.0 cpe:/a:isc:bind:9.6.0:p1 cpe:/a:isc:bind:9.6.0:rc2 cpe:/a:isc:bind:9.6-esv-r5b1 cpe:/a:isc:bind:9.6-esv-r4-p1 cpe:/a:isc:bind:9.6-esv-r4 cpe:/a:isc:bind:9.6-esv-r3 cpe:/a:isc:bind:9.6-esv-r2 cpe:/a:isc:bind:9.6-esv-r1 cpe:/a:isc:bind:9.6-esv cpe:/a:isc:bind:9.5.2p2 cpe:/a:isc:bind:9.5.2p1 cpe:/a:isc:bind:9.5.2b1 cpe:/a:isc:bind:9.5.2 cpe:/a:isc:bind:9.5.2:rc1 cpe:/a:isc:bind:9.5.1p3 cpe:/a:isc:bind:9.5.1p2 cpe:/a:isc:bind:9.5.1p1 cpe:/a:isc:bind:9.5.1b3 cpe:/a:isc:bind:9.5.1b2 cpe:/a:isc:bind:9.5.1b1 cpe:/a:isc:bind:9.5.1:rc2 cpe:/a:isc:bind:9.5.1 cpe:/a:isc:bind:9.5.1:rc1 cpe:/a:isc:bind:9.5.0b3 cpe:/a:isc:bind:9.5.0b2 cpe:/a:isc:bind:9.5.0b1 cpe:/a:isc:bind:9.5.0a7 cpe:/a:isc:bind:9.5.0a6 cpe:/a:isc:bind:9.5.0a5 cpe:/a:isc:bind:9.5.0a4 cpe:/a:isc:bind:9.5.0a3 cpe:/a:isc:bind:9.5.0a2 cpe:/a:isc:bind:9.5.0a1::bind_forum cpe:/a:isc:bind:9.5.0a1 cpe:/a:isc:bind:9.5.0-p2-w2 cpe:/a:isc:bind:9.5.0-p2-w1:windows cpe:/a:isc:bind:9.5.0-p2-w1 cpe:/a:isc:bind:9.5.0-p2 cpe:/a:isc:bind:9.5.0-p1 cpe:/a:isc:bind:9.5.0:rc1 cpe:/a:isc:bind:9.5.0 cpe:/a:isc:bind:9.5 cpe:/a:isc:bind:9.4.3b3 cpe:/a:isc:bind:9.4.3b2 cpe:/a:isc:bind:9.4.3b1 cpe:/a:isc:bind:9.4.3 cpe:/a:isc:bind:9.4.3:rc1 cpe:/a:isc:bind:9.4.2 cpe:/a:isc:bind:9.4.1 cpe:/a:isc:bind:9.4.0b4 cpe:/a:isc:bind:9.4.0b3 cpe:/a:isc:bind:9.4.0b2 cpe:/a:isc:bind:9.4.0b1 cpe:/a:isc:bind:9.4.0a6 cpe:/a:isc:bind:9.4.0a5 cpe:/a:isc:bind:9.4.0a4 cpe:/a:isc:bind:9.4.0a3 cpe:/a:isc:bind:9.4.0a2 cpe:/a:isc:bind:9.4.0a1 cpe:/a:isc:bind:9.4.0 cpe:/a:isc:bind:9.4.0:rc1 cpe:/a:isc:bind:9.4 cpe:/a:isc:bind:9.3.3 cpe:/a:isc:bind:9.3.2 cpe:/a:isc:bind:9.3.1 cpe:/a:isc:bind:9.3.0 cpe:/a:isc:bind:9.3 cpe:/a:isc:bind:9.2.7 cpe:/a:isc:bind:9.2.6 cpe:/a:isc:bind:9.2.5 cpe:/a:isc:bind:9.2.4 cpe:/a:isc:bind:9.2.3 cpe:/a:isc:bind:9.2.2:p3 cpe:/a:isc:bind:9.2.2 cpe:/a:isc:bind:9.2.1 cpe:/a:isc:bind:9.2.0:b1 cpe:/a:isc:bind:9.2.0:b2 cpe:/a:isc:bind:9.2.0:a3 cpe:/a:isc:bind:9.2.0 cpe:/a:isc:bind:9.2.0:a2 cpe:/a:isc:bind:9.2.0:rc1 cpe:/a:isc:bind:9.2.0:a1 cpe:/a:isc:bind:9.2 cpe:/a:isc:bind:9.1.3p3 cpe:/a:isc:bind:9.1.3p2 cpe:/a:isc:bind:9.1.3:rc1 cpe:/a:isc:bind:9.1.3:rc3 cpe:/a:isc:bind:9.1.3:rc2 cpe:/a:isc:bind:9.1.3 cpe:/a:isc:bind:9.1.2:rc1 cpe:/a:isc:bind:9.1.2 cpe:/a:isc:bind:9.1.1:rc6 cpe:/a:isc:bind:9.1.1:rc1 cpe:/a:isc:bind:9.1.1:rc5 cpe:/a:isc:bind:9.1.1 cpe:/a:isc:bind:9.1.1:rc4 cpe:/a:isc:bind:9.1.1:rc7 cpe:/a:isc:bind:9.1.1:rc2 cpe:/a:isc:bind:9.1.1:rc3 cpe:/a:isc:bind:9.1.0b3 cpe:/a:isc:bind:9.1.0b2 cpe:/a:isc:bind:9.1.0b1 cpe:/a:isc:bind:9.1.0:rc1 cpe:/a:isc:bind:9.1 cpe:/a:isc:bind:9.0.1 cpe:/a:isc:bind:9.0.1:rc1 cpe:/a:isc:bind:9.0.1:rc2 cpe:/a:isc:bind:9.0.0b5 cpe:/a:isc:bind:9.0.0b4 cpe:/a:isc:bind:9.0.0b3 cpe:/a:isc:bind:9.0.0b2 cpe:/a:isc:bind:9.0.0b1 cpe:/a:isc:bind:9.0.0:rc4 cpe:/a:isc:bind:9.0.0:rc1 cpe:/a:isc:bind:9.0.0:rc3 cpe:/a:isc:bind:9.0.0:rc5 cpe:/a:isc:bind:9.0.0:rc6 cpe:/a:isc:bind:9.0.0:rc2 cpe:/a:isc:bind:9.0	192

Open Source Vulnerability Database (OSVDB)

id	Description
77159	ISC BIND Recursive Query Parsing Remote DoS

Type	Count
Oval ID(s)	1
CPE ID(s)	192
osvdb(s)	1

Related	Severity
CVE-2011-4313	(Medium)

Same Subject	Severity
Login to view 11 more Alert(s)

RHSA-2011:1458

Executive Summary

Security-Database Scoring CVSS v2

Detail

Original Source

OVAL Definitions

CPE : Common Platform Enumeration

Open Source Vulnerability Database (OSVDB)

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU