Test Kennung:	1.3.6.1.4.1.25623.1.0.140696
Kategorie:	Denial of Service
Titel:	ISC BIND DoS Vulnerability (Jan 2017) - Windows
Zusammenfassung:	BIND is improperly sequencing cleanup operations on upstream recursion fetch; contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in; named.
Beschreibung:	Summary: BIND is improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affected Software/OS: ISC BIND 9.9.9-P8 to 9.9.11, 9.10.4-P8 to 9.10.6, 9.11.0-P5 to 9.11.2, 9.9.9-S10 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, and 9.12.0a1 to 9.12.0rc1. Solution: Update to version 9.9.11-S2, 9.10.6-S2, 9.9.11-P1, 9.10.6-P1, 9.11.2-P1, 9.12.0rc2 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-3145 102716 http://www.securityfocus.com/bid/102716 1040195 http://www.securitytracker.com/id/1040195 DSA-4089 https://www.debian.org/security/2018/dsa-4089 RHSA-2018:0101 https://access.redhat.com/errata/RHSA-2018:0101 RHSA-2018:0102 https://access.redhat.com/errata/RHSA-2018:0102 RHSA-2018:0487 https://access.redhat.com/errata/RHSA-2018:0487 RHSA-2018:0488 https://access.redhat.com/errata/RHSA-2018:0488 [debian-lts-announce] 20180121 [SECURITY] [DLA 1255-1] bind9 security update https://lists.debian.org/debian-lts-announce/2018/01/msg00029.html https://kb.isc.org/docs/aa-01542 https://security.netapp.com/advisory/ntap-20180117-0003/ https://supportportal.juniper.net/s/article/2018-07-Security-Bulletin-SRX-Series-Vulnerabilities-in-ISC-BIND-named
Copyright	Copyright (C) 2018 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.