Vulnerability   
Search   
    Search 191973 CVE descriptions
and 86218 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.702728
Category:Debian Local Security Checks
Title:Debian Security Advisory DSA 2728-1 (bind9 - denial of service)
Summary:Maxim Shudrak and the HP Zero Day Initiative reported a denial of;service vulnerability in BIND, a DNS server. A specially crafted query;that includes malformed rdata can cause named daemon to terminate with;an assertion failure while rejecting the malformed query.
Description:Summary:
Maxim Shudrak and the HP Zero Day Initiative reported a denial of
service vulnerability in BIND, a DNS server. A specially crafted query
that includes malformed rdata can cause named daemon to terminate with
an assertion failure while rejecting the malformed query.

Affected Software/OS:
bind9 on Debian Linux

Solution:
For the oldstable distribution (squeeze), this problem has been fixed in
version 1:9.7.3.dfsg-1~
squeeze11.

For the stable distribution (wheezy), this problem has been fixed in
version 1:9.8.4.dfsg.P1-6+nmu2+deb7u1.

For the unstable distribution (sid), this problem will be fixed soon.

We recommend that you upgrade your bind9 packages.

CVSS Score:
7.8

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2013-4854
http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html
BugTraq ID: 61479
http://www.securityfocus.com/bid/61479
Bugtraq: 20130806 [slackware-security] bind (SSA:2013-218-01) (Google Search)
http://archives.neohapsis.com/archives/bugtraq/2013-08/0030.html
Debian Security Information: DSA-2728 (Google Search)
http://www.debian.org/security/2013/dsa-2728
http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113251.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113108.html
FreeBSD Security Advisory: FreeBSD-SA-13:07
http://www.freebsd.org/security/advisories/FreeBSD-SA-13:07.bind.asc
HPdes Security Advisory: HPSBUX02926
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03922396
HPdes Security Advisory: SSRT101281
http://www.mandriva.com/security/advisories?name=MDVSA-2013:202
http://www.zerodayinitiative.com/advisories/ZDI-13-210/
https://kc.mcafee.com/corporate/index?page=content&id=SB10052
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19561
RedHat Security Advisories: RHSA-2013:1114
http://rhn.redhat.com/errata/RHSA-2013-1114.html
RedHat Security Advisories: RHSA-2013:1115
http://rhn.redhat.com/errata/RHSA-2013-1115.html
http://www.securitytracker.com/id/1028838
http://secunia.com/advisories/54134
http://secunia.com/advisories/54185
http://secunia.com/advisories/54207
http://secunia.com/advisories/54211
http://secunia.com/advisories/54323
http://secunia.com/advisories/54432
SuSE Security Announcement: SUSE-SU-2013:1310 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00004.html
SuSE Security Announcement: openSUSE-SU-2013:1354 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00018.html
http://www.ubuntu.com/usn/USN-1910-1
XForce ISS Database: isc-bind-cve20134854-dos(86004)
https://exchange.xforce.ibmcloud.com/vulnerabilities/86004
CopyrightCopyright (C) 2013 Greenbone Networks GmbH http://greenbone.net

This is only one of 86218 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2020 E-Soft Inc. All rights reserved.