Slackware Local Security Checks : Slackware: Security Advisory (SSA:2012-209-01)

Anfälligkeitssuche		Suche in 324607 CVE Beschreibungen und 145615 Test Beschreibungen, Zugriff auf 10,000+ Quellverweise.
	Tests CVE Alle

Test Kennung: 1.3.6.1.4.1.25623.1.0.71969

Kategorie: Slackware Local Security Checks

Titel: Slackware: Security Advisory (SSA:2012-209-01)

Zusammenfassung: The remote host is missing an update for the 'bind' package(s) announced via the SSA:2012-209-01 advisory.

Beschreibung: Summary:
The remote host is missing an update for the 'bind' package(s) announced via the SSA:2012-209-01 advisory.

Vulnerability Insight:
New bind packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1,
13.37, and -current to fix security issues.

Here are the details from the Slackware 13.37 ChangeLog:
+--------------------------+
patches/packages/bind-9.7.6_P2-i486-1_slack13.37.txz: Upgraded.
Prevents a named assert (crash) when validating caused by using
'Bad cache' data before it has been initialized. [RT #30025]
ISC_QUEUE handling for recursive clients was updated to address a
race condition that could cause a memory leak. This rarely occurred
with UDP clients, but could be a significant problem for a server
handling a steady rate of TCP queries. [RT #29539 & #30233]
Under heavy incoming TCP query loads named could experience a
memory leak which could lead to significant reductions in query
response or cause the server to be terminated on systems with
'out of memory' killers. [RT #29539]
A condition has been corrected where improper handling of zero-length
RDATA could cause undesirable behavior, including termination of
the named process. [RT #29644]
(* Security fix *)
+--------------------------+

Affected Software/OS:
'bind' package(s) on Slackware 12.0, Slackware 12.1, Slackware 12.2, Slackware 13.0, Slackware 13.1, Slackware 13.37, Slackware current.

Solution:
Please install the updated package(s).

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N

Copyright Copyright (C) 2012 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.
Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.

Test Kennung:	1.3.6.1.4.1.25623.1.0.71969
Kategorie:	Slackware Local Security Checks
Titel:	Slackware: Security Advisory (SSA:2012-209-01)
Zusammenfassung:	The remote host is missing an update for the 'bind' package(s) announced via the SSA:2012-209-01 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'bind' package(s) announced via the SSA:2012-209-01 advisory. Vulnerability Insight: New bind packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: +--------------------------+ patches/packages/bind-9.7.6_P2-i486-1_slack13.37.txz: Upgraded. Prevents a named assert (crash) when validating caused by using 'Bad cache' data before it has been initialized. [RT #30025] ISC_QUEUE handling for recursive clients was updated to address a race condition that could cause a memory leak. This rarely occurred with UDP clients, but could be a significant problem for a server handling a steady rate of TCP queries. [RT #29539 & #30233] Under heavy incoming TCP query loads named could experience a memory leak which could lead to significant reductions in query response or cause the server to be terminated on systems with 'out of memory' killers. [RT #29539] A condition has been corrected where improper handling of zero-length RDATA could cause undesirable behavior, including termination of the named process. [RT #29644] (* Security fix *) +--------------------------+ Affected Software/OS: 'bind' package(s) on Slackware 12.0, Slackware 12.1, Slackware 12.2, Slackware 13.0, Slackware 13.1, Slackware 13.37, Slackware current. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Copyright	Copyright (C) 2012 Greenbone AG