Security update for bind SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:1205-1 Final 1 1 2014-01-27T18:38:10Z current 2014-01-27T18:38:10Z 2014-01-27T18:38:10Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for bind This update fixes a DoS vulnerability in bind when handling malformed NSEC3-signed zones. CVE-2014-0591 has been assigned to this issue. Security Issue references: * CVE-2014-0591 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0591> The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp3-bind,sledsp3-bind,slessp3-bind Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20151205-1/ Link for SUSE-SU-2015:1205-1 https://lists.opensuse.org/opensuse-security-announce/2015-07/msg00013.html E-Mail link for SUSE-SU-2015:1205-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/743758 SUSE Bug 743758 https://bugzilla.suse.com/815230 SUSE Bug 815230 https://bugzilla.suse.com/819475 SUSE Bug 819475 https://bugzilla.suse.com/831899 SUSE Bug 831899 https://bugzilla.suse.com/858639 SUSE Bug 858639 https://bugzilla.suse.com/882511 SUSE Bug 882511 https://bugzilla.suse.com/908994 SUSE Bug 908994 https://bugzilla.suse.com/918330 SUSE Bug 918330 https://bugzilla.suse.com/936476 SUSE Bug 936476 https://www.suse.com/security/cve/CVE-2013-4854/ SUSE CVE CVE-2013-4854 page https://www.suse.com/security/cve/CVE-2014-0591/ SUSE CVE CVE-2014-0591 page https://www.suse.com/security/cve/CVE-2014-8500/ SUSE CVE CVE-2014-8500 page https://www.suse.com/security/cve/CVE-2015-1349/ SUSE CVE CVE-2015-1349 page https://www.suse.com/security/cve/CVE-2015-4620/ SUSE CVE CVE-2015-4620 page SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server for SAP Applications 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 bind-devel-9.9.4P2-0.6.1 bind-devel-32bit-9.9.4P2-0.6.1 bind-libs-9.9.4P2-0.6.1 bind-libs-32bit-9.9.4P2-0.6.1 bind-utils-9.9.4P2-0.6.1 bind-9.9.4P2-0.6.1 bind-chrootenv-9.9.4P2-0.6.1 bind-doc-9.9.4P2-0.6.1 bind-libs-x86-9.9.4P2-0.6.1 bind-libs-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 bind-libs-32bit-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 bind-utils-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 bind-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3 bind-chrootenv-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3 bind-doc-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3 bind-libs-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3 bind-libs-32bit-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3 bind-libs-x86-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3 bind-utils-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3 bind-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA bind-chrootenv-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA bind-doc-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA bind-libs-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA bind-libs-32bit-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA bind-libs-x86-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA bind-utils-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA bind-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 bind-chrootenv-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 bind-doc-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 bind-libs-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 bind-libs-32bit-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 bind-libs-x86-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 bind-utils-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 bind-devel-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 bind-devel-32bit-9.9.4P2-0.6.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013. CVE-2013-4854 SUSE Linux Enterprise Desktop 11 SP3:bind-libs-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Desktop 11 SP3:bind-libs-9.9.4P2-0.6.1 SUSE Linux Enterprise Desktop 11 SP3:bind-utils-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-chrootenv-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-doc-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-libs-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-libs-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-libs-x86-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-utils-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-chrootenv-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-doc-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-libs-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-libs-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-libs-x86-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-utils-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-chrootenv-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-doc-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-libs-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-libs-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-libs-x86-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-utils-9.9.4P2-0.6.1 SUSE Linux Enterprise Software Development Kit 11 SP3:bind-devel-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Software Development Kit 11 SP3:bind-devel-9.9.4P2-0.6.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151205-1/ https://www.suse.com/security/cve/CVE-2013-4854.html CVE-2013-4854 https://bugzilla.suse.com/831899 SUSE Bug 831899 The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature. CVE-2014-0591 SUSE Linux Enterprise Desktop 11 SP3:bind-libs-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Desktop 11 SP3:bind-libs-9.9.4P2-0.6.1 SUSE Linux Enterprise Desktop 11 SP3:bind-utils-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-chrootenv-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-doc-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-libs-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-libs-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-libs-x86-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-utils-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-chrootenv-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-doc-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-libs-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-libs-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-libs-x86-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-utils-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-chrootenv-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-doc-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-libs-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-libs-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-libs-x86-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-utils-9.9.4P2-0.6.1 SUSE Linux Enterprise Software Development Kit 11 SP3:bind-devel-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Software Development Kit 11 SP3:bind-devel-9.9.4P2-0.6.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151205-1/ https://www.suse.com/security/cve/CVE-2014-0591.html CVE-2014-0591 https://bugzilla.suse.com/858639 SUSE Bug 858639 ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals. CVE-2014-8500 SUSE Linux Enterprise Desktop 11 SP3:bind-libs-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Desktop 11 SP3:bind-libs-9.9.4P2-0.6.1 SUSE Linux Enterprise Desktop 11 SP3:bind-utils-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-chrootenv-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-doc-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-libs-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-libs-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-libs-x86-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-utils-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-chrootenv-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-doc-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-libs-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-libs-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-libs-x86-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-utils-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-chrootenv-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-doc-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-libs-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-libs-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-libs-x86-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-utils-9.9.4P2-0.6.1 SUSE Linux Enterprise Software Development Kit 11 SP3:bind-devel-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Software Development Kit 11 SP3:bind-devel-9.9.4P2-0.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151205-1/ https://www.suse.com/security/cve/CVE-2014-8500.html CVE-2014-8500 https://bugzilla.suse.com/908994 SUSE Bug 908994 named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit, or daemon crash) by triggering an incorrect trust-anchor management scenario in which no key is ready for use. CVE-2015-1349 SUSE Linux Enterprise Desktop 11 SP3:bind-libs-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Desktop 11 SP3:bind-libs-9.9.4P2-0.6.1 SUSE Linux Enterprise Desktop 11 SP3:bind-utils-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-chrootenv-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-doc-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-libs-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-libs-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-libs-x86-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-utils-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-chrootenv-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-doc-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-libs-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-libs-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-libs-x86-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-utils-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-chrootenv-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-doc-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-libs-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-libs-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-libs-x86-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-utils-9.9.4P2-0.6.1 SUSE Linux Enterprise Software Development Kit 11 SP3:bind-devel-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Software Development Kit 11 SP3:bind-devel-9.9.4P2-0.6.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151205-1/ https://www.suse.com/security/cve/CVE-2015-1349.html CVE-2015-1349 https://bugzilla.suse.com/918330 SUSE Bug 918330 name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) by constructing crafted zone data and then making a query for a name in that zone. CVE-2015-4620 SUSE Linux Enterprise Desktop 11 SP3:bind-libs-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Desktop 11 SP3:bind-libs-9.9.4P2-0.6.1 SUSE Linux Enterprise Desktop 11 SP3:bind-utils-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-chrootenv-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-doc-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-libs-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-libs-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-libs-x86-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-utils-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-chrootenv-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-doc-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-libs-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-libs-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-libs-x86-9.9.4P2-0.6.1 SUSE Linux Enterprise Server 11 SP3:bind-utils-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-chrootenv-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-doc-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-libs-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-libs-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-libs-x86-9.9.4P2-0.6.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:bind-utils-9.9.4P2-0.6.1 SUSE Linux Enterprise Software Development Kit 11 SP3:bind-devel-32bit-9.9.4P2-0.6.1 SUSE Linux Enterprise Software Development Kit 11 SP3:bind-devel-9.9.4P2-0.6.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151205-1/ https://www.suse.com/security/cve/CVE-2015-4620.html CVE-2015-4620 https://bugzilla.suse.com/936476 SUSE Bug 936476