Test Kennung:	1.3.6.1.4.1.25623.1.0.143937
Kategorie:	Denial of Service
Titel:	ISC BIND Multiple DoS Vulnerabilities (CVE-2020-8616, CVE-2020-8617) - Linux
Zusammenfassung:	ISC BIND is prone to multiple denial of service vulnerabilities.
Beschreibung:	Summary: ISC BIND is prone to multiple denial of service vulnerabilities. Vulnerability Insight: ISC BIND is prone to multiple denial of service vulnerabilities: - BIND does not sufficiently limit the number of fetches performed when processing referrals (CVE-2020-8616) - A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c (CVE-2020-8617) Affected Software/OS: BIND 9.0.0 - 9.11.18, 9.12.0 - 9.12.4-P2, 9.14.0 - 9.14.11, 9.16.0 - 9.16.2, 9.17.0 -> 9.17.1 and 9.9.3-S1 - 9.11.18-S1. Also affects all releases in the obsolete 9.13 and 9.15 development branches. Solution: Update to version 9.11.19, 9.14.12, 9.16.3, 9.11.19-S1 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-8616 Debian Security Information: DSA-4689 (Google Search) https://www.debian.org/security/2020/dsa-4689 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WOGCJS2XQ3SQNF4W6GLZ73LWZJ6ZZWZI/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JKJXVBOKZ36ER3EUCR7VRB7WGHIIMPNJ/ http://www.nxnsattack.com https://lists.debian.org/debian-lts-announce/2020/05/msg00031.html http://www.openwall.com/lists/oss-security/2020/05/19/4 SuSE Security Announcement: openSUSE-SU-2020:1699 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html SuSE Security Announcement: openSUSE-SU-2020:1701 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html https://usn.ubuntu.com/4365-1/ https://usn.ubuntu.com/4365-2/ Common Vulnerability Exposure (CVE) ID: CVE-2020-8617 http://packetstormsecurity.com/files/157836/BIND-TSIG-Denial-Of-Service.html
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.