Test ID:	1.3.6.1.4.1.25623.1.0.105359
Category:	F5 Local Security Checks
Title:	F5 BIG-IP - BIND vulnerability CVE-2015-5986
Summary:	The remote host is missing a security patch.
Description:	Summary: The remote host is missing a security patch. Vulnerability Insight: An incorrect boundary check in openpgpkey_61.c can cause named to terminate due to a REQUIRE assertion failure. This defect can be deliberately exploited by an attacker who can provide a maliciously constructed response in answer to a query. (CVE-2015-5986) Vulnerability Impact: A remote attacker may be able to cause a denial-of-service (DoS) attack on the BIG-IP system's local instance of BIND by using a specially crafted DNS request in configurations that expose BIND to requests from untrusted users. If the BIND process (named) terminates or stops responding, the bigstart process will automatically restart the impacted daemon. Solution: See the referenced vendor advisory for a solution. CVSS Score: 7.1 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-5986 http://lists.apple.com/archives/security-announce/2015/Oct/msg00009.html BugTraq ID: 76618 http://www.securityfocus.com/bid/76618 http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165810.html http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167465.html https://security.gentoo.org/glsa/201510-01 http://www.securitytracker.com/id/1033453
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.