Test ID:	1.3.6.1.4.1.25623.1.0.120431
Category:	Amazon Linux Local Security Checks
Title:	Amazon Linux: Security Advisory (ALAS-2013-214)
Summary:	The remote host is missing an update for the 'bind' package(s) announced via the ALAS-2013-214 advisory.
Description:	Summary: The remote host is missing an update for the 'bind' package(s) announced via the ALAS-2013-214 advisory. Vulnerability Insight: A denial of service flaw was found in BIND. A remote attacker could use this flaw to send a specially-crafted DNS query to named that, when processed, would cause named to crash when rejecting the malformed query. (CVE-2013-4854) Affected Software/OS: 'bind' package(s) on Amazon Linux. Solution: Please install the updated package(s). CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4854 http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html BugTraq ID: 61479 http://www.securityfocus.com/bid/61479 Bugtraq: 20130806 [slackware-security] bind (SSA:2013-218-01) (Google Search) http://archives.neohapsis.com/archives/bugtraq/2013-08/0030.html Debian Security Information: DSA-2728 (Google Search) http://www.debian.org/security/2013/dsa-2728 http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113251.html http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113108.html FreeBSD Security Advisory: FreeBSD-SA-13:07 http://www.freebsd.org/security/advisories/FreeBSD-SA-13:07.bind.asc HPdes Security Advisory: HPSBUX02926 https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03922396 HPdes Security Advisory: SSRT101281 http://www.mandriva.com/security/advisories?name=MDVSA-2013:202 http://www.zerodayinitiative.com/advisories/ZDI-13-210/ https://kc.mcafee.com/corporate/index?page=content&id=SB10052 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19561 RedHat Security Advisories: RHSA-2013:1114 http://rhn.redhat.com/errata/RHSA-2013-1114.html RedHat Security Advisories: RHSA-2013:1115 http://rhn.redhat.com/errata/RHSA-2013-1115.html http://www.securitytracker.com/id/1028838 http://secunia.com/advisories/54134 http://secunia.com/advisories/54185 http://secunia.com/advisories/54207 http://secunia.com/advisories/54211 http://secunia.com/advisories/54323 http://secunia.com/advisories/54432 SuSE Security Announcement: SUSE-SU-2013:1310 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00004.html SuSE Security Announcement: openSUSE-SU-2013:1354 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00018.html http://www.ubuntu.com/usn/USN-1910-1 XForce ISS Database: isc-bind-cve20134854-dos(86004) https://exchange.xforce.ibmcloud.com/vulnerabilities/86004
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.