- New upstream release

  - Security fix for CVE-2017-3140

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update back to ISC supported version. Security fix for CVE-2017-3143, CVE-2017-3142, CVE-2017-3140

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to new ISC supported version 9.9.10-P2 including security fixes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201708-01 (BIND: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in BIND. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could send a specially crafted DNS request to the BIND       resolver resulting in a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Update to new ISC supported version 9.9.10.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update back to ISC supported version. Security fix for CVE-2017-3143, CVE-2017-3142, CVE-2017-3140

----

Update to 10.1.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue.

According to its self-reported version number, the instance of ISC BIND running on the remote name server is 9.x.x prior to 9.9.10-P1, 9.10.x prior to 9.10.5-P1, or 9.11.x prior to 9.11.1-P1. It is, therefore, affected by multiple vulnerabilities :

  - A denial of service vulnerability exists when processing     Response Policy Zone (RPZ) rule types. An     unauthenticated, remote attacker can exploit this, via a     specially crafted query, to cause an infinite loop     condition that degrades the server's functionality.
    (CVE-2017-3140)

  - A privilege escalation vulnerability exists in the BIND     installer for Windows due to using an unquoted service     path. A local attacker can exploit this to gain elevated     privileges provided that the host file system     permissions allow this. Note that non-Windows builds and     installations are not affected. (CVE-2017-3141)

ID	Name	Product	Family	Published	Updated	Severity
101620	Fedora 26 : 32:bind (2017-43613b15ff)	Nessus	Fedora Local Security Checks	7/17/2017	12/10/2025	medium
101494	Fedora 24 : 32:bind / bind-dyndb-ldap / dnsperf (2017-001f135337)	Nessus	Fedora Local Security Checks	7/13/2017	12/11/2025	medium
101677	Fedora 26 : 12:dhcp / bind99 (2017-87f1f8c798)	Nessus	Fedora Local Security Checks	7/17/2017	12/10/2025	medium
102531	GLSA-201708-01 : BIND: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	8/17/2017	11/26/2025	high
101326	Fedora 25 : 12:dhcp / bind99 (2017-167cfa7b09)	Nessus	Fedora Local Security Checks	7/10/2017	12/12/2025	medium
101246	Fedora 25 : 32:bind / bind-dyndb-ldap / dnsperf (2017-d04f7ddd73)	Nessus	Fedora Local Security Checks	7/6/2017	12/12/2025	medium
100794	Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : bind (SSA:2017-165-01)	Nessus	Slackware Local Security Checks	6/15/2017	12/16/2025	medium
100996	ISC BIND 9.x.x < 9.9.10-P1 / 9.10.x < 9.10.5-P1 / 9.11.x < 9.11.1-P1 Multiple Vulnerabilities	Nessus	DNS	6/22/2017	11/13/2019	high

Detections

Analytics

Plugins Search

medium

medium

medium

high

medium

medium

medium

high