Test ID:	1.3.6.1.4.1.25623.1.0.870799
Category:	Red Hat Local Security Checks
Title:	RedHat Update for bind RHSA-2012:1123-01
Summary:	The remote host is missing an update for the 'bind'; package(s) announced via the referenced advisory.
Description:	Summary: The remote host is missing an update for the 'bind' package(s) announced via the referenced advisory. Vulnerability Insight: The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named), a resolver library (routines for applications to use when interfacing with DNS), and tools for verifying that the DNS server is operating correctly. An uninitialized data structure use flaw was found in BIND when DNSSEC validation was enabled. A remote attacker able to send a large number of queries to a DNSSEC validating BIND resolver could use this flaw to cause it to exit unexpectedly with an assertion failure. (CVE-2012-3817) Users of bind are advised to upgrade to these updated packages, which correct this issue. After installing the update, the BIND daemon (named) will be restarted automatically. Affected Software/OS: bind on Red Hat Enterprise Linux (v. 5 server), Red Hat Enterprise Linux Desktop (v. 6), Red Hat Enterprise Linux Server (v. 6), Red Hat Enterprise Linux Workstation (v. 6) Solution: Please Install the Updated Packages. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-3817 http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html Debian Security Information: DSA-2517 (Google Search) http://www.debian.org/security/2012/dsa-2517 RedHat Security Advisories: RHSA-2012:1122 http://rhn.redhat.com/errata/RHSA-2012-1122.html RedHat Security Advisories: RHSA-2012:1123 http://rhn.redhat.com/errata/RHSA-2012-1123.html http://www.securitytracker.com/id?1027296 http://secunia.com/advisories/51096 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2012&m=slackware-security.536004 SuSE Security Announcement: openSUSE-SU-2012:0969 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-08/msg00013.html SuSE Security Announcement: openSUSE-SU-2012:0971 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-08/msg00015.html http://www.ubuntu.com/usn/USN-1518-1
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.