BIND: Multiple vulnerabilities

BIND: Multiple vulnerabilities Multiple vulnerabilities have been found in BIND, the worst of which could result in a Denial of Service condition. bind 2019-03-14 2019-03-14 657654 666946 remote 9.12.1_p2-r1 9.12.1_p2-r1

BIND (Berkeley Internet Name Domain) is a Name Server.

Multiple vulnerabilities have been discovered in BIND. Please review the CVE identifiers referenced below for details.

BIND can improperly permit recursive query service to unauthorized clients possibly resulting in a Denial of Service condition or to be used in DNS reflection attacks.

There is no known workaround at this time.

All bind users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=net-dns/bind-9.12.1_p2-r1"

CVE-2018-5738 CVE-2018-5740 CVE-2018-5741 BlueKnight BlueKnight