Test ID:	1.3.6.1.4.1.25623.1.0.703758
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-3758-1)
Summary:	The remote host is missing an update for the Debian 'bind9' package(s) announced via the DSA-3758-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'bind9' package(s) announced via the DSA-3758-1 advisory. Vulnerability Insight: Several denial-of-service vulnerabilities (assertion failures) were discovered in BIND, a DNS server implementation. CVE-2016-9131 A crafted upstream response to an ANY query could cause an assertion failure. CVE-2016-9147 A crafted upstream response with self-contradicting DNSSEC data could cause an assertion failure. CVE-2016-9444 Specially-crafted upstream responses with a DS record could cause an assertion failure. These vulnerabilities predominantly affect DNS servers providing recursive service. Client queries to authoritative-only servers cannot trigger these assertion failures. These vulnerabilities are present whether or not DNSSEC validation is enabled in the server configuration. For the stable distribution (jessie), these problems have been fixed in version 1:9.9.5.dfsg-9+deb8u9. We recommend that you upgrade your bind9 packages. Affected Software/OS: 'bind9' package(s) on Debian 8. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9131 BugTraq ID: 95386 http://www.securityfocus.com/bid/95386 Debian Security Information: DSA-3758 (Google Search) http://www.debian.org/security/2017/dsa-3758 https://security.gentoo.org/glsa/201708-01 RedHat Security Advisories: RHSA-2017:0062 http://rhn.redhat.com/errata/RHSA-2017-0062.html RedHat Security Advisories: RHSA-2017:1583 https://access.redhat.com/errata/RHSA-2017:1583 http://www.securitytracker.com/id/1037582 Common Vulnerability Exposure (CVE) ID: CVE-2016-9147 BugTraq ID: 95390 http://www.securityfocus.com/bid/95390 RedHat Security Advisories: RHSA-2017:0063 http://rhn.redhat.com/errata/RHSA-2017-0063.html RedHat Security Advisories: RHSA-2017:0064 http://rhn.redhat.com/errata/RHSA-2017-0064.html RedHat Security Advisories: RHSA-2017:1582 https://access.redhat.com/errata/RHSA-2017:1582 Common Vulnerability Exposure (CVE) ID: CVE-2016-9444 BugTraq ID: 95393 http://www.securityfocus.com/bid/95393
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.