Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2020:1061
HistoryMar 31, 2020 - 9:13 a.m.

(RHSA-2020:1061) Moderate: bind security and bug fix update

2020-03-3109:13:57
access.redhat.com
119

0.017 Low

EPSS

Percentile

87.9%

JSON

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: TCP Pipelining doesn’t limit TCP clients on a single connection (CVE-2019-6477)

  • bind: An assertion failure if a trust anchor rolls over to an unsupported key algorithm when using managed-keys (CVE-2018-5745)

  • bind: Controls for zone transfers may not be properly applied to DLZs if the zones are writable (CVE-2019-6465)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.8 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7ppc64bind-libs< 9.11.4-16.P2.el7bind-libs-9.11.4-16.P2.el7.ppc64.rpm
RedHat7i686bind-libs-lite< 9.11.4-16.P2.el7bind-libs-lite-9.11.4-16.P2.el7.i686.rpm
RedHat7x86_64bind-pkcs11-devel< 9.11.4-16.P2.el7bind-pkcs11-devel-9.11.4-16.P2.el7.x86_64.rpm
RedHat7ppcbind-export-libs< 9.11.4-16.P2.el7bind-export-libs-9.11.4-16.P2.el7.ppc.rpm
RedHat7ppc64bind-pkcs11-devel< 9.11.4-16.P2.el7bind-pkcs11-devel-9.11.4-16.P2.el7.ppc64.rpm
RedHat7s390bind-pkcs11-libs< 9.11.4-16.P2.el7bind-pkcs11-libs-9.11.4-16.P2.el7.s390.rpm
RedHat7ppc64bind-lite-devel< 9.11.4-16.P2.el7bind-lite-devel-9.11.4-16.P2.el7.ppc64.rpm
RedHat7x86_64bind-pkcs11-libs< 9.11.4-16.P2.el7bind-pkcs11-libs-9.11.4-16.P2.el7.x86_64.rpm
RedHat7s390bind-libs-lite< 9.11.4-16.P2.el7bind-libs-lite-9.11.4-16.P2.el7.s390.rpm
RedHat7x86_64bind-lite-devel< 9.11.4-16.P2.el7bind-lite-devel-9.11.4-16.P2.el7.x86_64.rpm
Rows per page:
1-10 of 921

Related

oraclelinux 3
nessus 49
ibm 6
centos 1
amazon 1
redhat 3
openvas 38
osv 5
ubuntu 3
debian 4
altlinux 5
archlinux 1
fedora 8
cisa 2
suse 4
f5 3
alpinelinux 3
nvd 3
debiancve 3
cvelist 3
cve 3
slackware 1
prion 3
redhatcve 3
ubuntucve 3
symantec 1
veracode 1
mageia 1
photon 7
rosalinux 1
oraclelinux
oraclelinux
bind security and bug fix update
2020-04-06 00:00:00
bind security and bug fix update
2019-11-14 00:00:00
bind security, bug fix, and enhancement update
2020-05-05 00:00:00
nessus
nessus
Amazon Linux 2 : bind (ALAS-2020-1441)
2020-07-02 00:00:00
Scientific Linux Security Update : bind on SL7.x x86_64 (20200407)
2020-04-21 00:00:00
Oracle Linux 7 : bind (ELSA-2020-1061)
2023-09-07 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in BIND affect Power Hardware Management Console (CVE-2018-5745, CVE-2019-6465 and CVE-2019-6477)
2021-09-22 23:38:15
Security Bulletin: Vulnerability in BIND affects IBM Integrated Analytics System
2020-11-10 10:27:57
Security Bulletin: IBM i is affected by networking BIND vulnerabilities CVE-2018-5744 CVE-2019-6465 and CVE-2018-5745.
2022-08-15 16:26:47
centos
centos
bind security update
2020-04-08 17:45:58
amazon
amazon
Medium: bind
2020-06-26 22:51:00
redhat
redhat
(RHSA-2020:1277) Moderate: OpenShift Container Platform 4.3.10 openshift-enterprise-hyperkube-container security update
2020-04-08 07:06:28
(RHSA-2019:3552) Low: bind security and bug fix update
2019-11-05 17:59:08
(RHSA-2020:1845) Moderate: bind security, bug fix, and enhancement update
2020-04-28 09:23:15
openvas
openvas
Debian: Security Advisory (DLA-1697-1)
2019-02-28 00:00:00
Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2019-1822)
2020-01-23 00:00:00
Ubuntu: Security Advisory (USN-3893-2)
2022-08-26 00:00:00
osv
osv
bind9 - security update
2019-02-28 00:00:00
bind9 - security update
2019-05-09 00:00:00
CVE-2019-6465
2019-10-09 16:15:16
ubuntu
ubuntu
Bind vulnerabilities
2019-02-25 00:00:00
Bind vulnerabilities
2019-02-22 00:00:00
Bind vulnerability
2019-11-21 00:00:00
debian
debian
[SECURITY] [DLA 1697-1] bind9 security updat
2019-02-28 21:11:35
[SECURITY] [DSA 4440-1] bind9 security update
2019-05-09 20:23:59
[SECURITY] [DSA 4689-1] bind9 security update
2020-05-19 19:48:14
altlinux
altlinux
Security fix for the ALT Linux 9 package bind version 9.11.5.P4-alt1
2019-02-22 00:00:00
Security fix for the ALT Linux 10 package bind version 9.11.5.P4-alt1
2019-02-22 00:00:00
Security fix for the ALT Linux 10 package bind version 9.11.13-alt1
2019-11-21 00:00:00
archlinux
archlinux
[ASA-201902-25] bind: multiple issues
2019-02-25 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: bind-9.11.5-4.P4.fc29
2019-02-26 03:08:57
[SECURITY] Fedora 30 Update: dhcp-4.3.6-38.fc30
2019-12-13 01:04:41
[SECURITY] Fedora 30 Update: dnsperf-2.3.2-2.fc30
2019-12-13 01:04:41
cisa
cisa
ISC Releases Security Updates for BIND
2019-02-22 00:00:00
ISC Releases Security Advisory for BIND
2019-11-21 00:00:00
suse
suse
Security update for bind (important)
2019-06-10 00:00:00
Security update for bind (important)
2019-06-10 00:00:00
Security update for bind (moderate)
2020-10-20 00:00:00
f5
f5
K15840535 : BIND vulnerability CVE-2019-6477
2019-12-03 00:00:00
K01713115 : BIND vulnerability CVE-2019-6465
2019-02-22 00:00:00
K25244852 : BIND vulnerability CVE-2018-5745
2019-02-22 00:00:00
alpinelinux
alpinelinux
CVE-2019-6477
2019-11-26 16:15:13
CVE-2019-6465
2019-10-09 16:15:16
CVE-2018-5745
2019-10-09 16:15:14
nvd
nvd
CVE-2019-6465
2019-10-09 16:15:16
CVE-2019-6477
2019-11-26 16:15:13
CVE-2018-5745
2019-10-09 16:15:14
debiancve
debiancve
CVE-2019-6465
2019-10-09 16:15:16
CVE-2019-6477
2019-11-26 16:15:13
CVE-2018-5745
2019-10-09 16:15:14
cvelist
cvelist
CVE-2019-6465 Zone transfer controls for writable DLZ zones were not effective
2019-02-21 00:00:00
CVE-2019-6477 TCP-pipelined queries can bypass tcp-clients limit
2019-11-20 00:00:00
CVE-2018-5745 An assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys
2019-02-21 00:00:00
cve
cve
CVE-2019-6477
2019-11-26 16:15:13
CVE-2019-6465
2019-10-09 16:15:16
CVE-2018-5745
2019-10-09 16:15:14
slackware
slackware
[slackware-security] bind
2019-11-21 04:26:08
prion
prion
Code injection
2019-10-09 16:15:00
Design/Logic Flaw
2019-10-09 16:15:00
Code injection
2019-11-26 16:15:00
redhatcve
redhatcve
CVE-2019-6465
2020-04-04 05:47:06
CVE-2018-5745
2020-01-25 22:03:18
CVE-2019-6477
2020-04-08 05:07:02
ubuntucve
ubuntucve
CVE-2019-6465
2019-02-21 00:00:00
CVE-2019-6477
2019-11-20 00:00:00
CVE-2018-5745
2019-02-21 00:00:00
symantec
symantec
ISC BIND CVE-2019-6477 Remote Denial of Service Vulnerability
2019-11-20 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-11-21 02:00:21
mageia
mageia
Updated bind packages fix security vulnerability
2020-06-15 10:54:40
photon
photon
Important Photon OS Security Update - PHSA-2019-0199
2019-12-30 00:00:00
Important Photon OS Security Update - PHSA-2020-0223
2020-04-02 00:00:00
Critical Photon OS Security Update - PHSA-2020-0049
2020-01-18 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2245
2023-10-17 12:03:14

0.017 Low

EPSS

Percentile

87.9%

JSON
Related for RHSA-2020:1061
oraclelinux3nessus49ibm6centos1amazon1redhat3openvas38osv5ubuntu3debian4altlinux5archlinux1fedora8cisa2suse4f53alpinelinux3nvd3debiancve3cvelist3cve3slackware1prion3redhatcve3ubuntucve3symantec1veracode1mageia1photon7rosalinux1