IBM Security Bulletin: Vulnerabilities in BIND impact AIX (CVE-2017-3142, CVE-2017-3143)

There are vulnerabilities in BIND that impact AIX.

CVE(s): CVE-2017-3142, CVE-2017-3143

Affected product(s) and affected version(s):

        AIX  6.1, 7.1
        
        The following fileset levels are vulnerable:
        
        key_fileset = aix

        Fileset                    Lower Level  Upper Level KEY 
        ------------------------------------------------------------
        bos.net.tcp.client         6.1.9.0      6.1.9.201   key_w_fs
        bos.net.tcp.client         7.1.3.0      7.1.3.49    key_w_fs
        
 
        Note:  To find out whether the affected filesets are installed 
        on your systems, refer to the lslpp command found in AIX user's guide.

        Example:  lslpp -L | grep -i bos.net.tcp.client

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2vCwoxo
X-Force Database: http://ift.tt/2v5WKuc
X-Force Database: http://ift.tt/2tJHrDP

The post IBM Security Bulletin: Vulnerabilities in BIND impact AIX (CVE-2017-3142, CVE-2017-3143) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2x7Szjh