Test ID:	1.3.6.1.4.1.25623.1.0.882941
Category:	CentOS Local Security Checks
Title:	CentOS Update for bind CESA-2018:2570 centos7
Summary:	Check the version of bind
Description:	Summary: Check the version of bind Vulnerability Insight: The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named) a resolver library (routines for applications to use when interfacing with DNS) and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: processing of certain records when 'deny-answer-aliases' is in use may trigger an assert leading to a denial of service (CVE-2018-5740) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank ISC for reporting this issue. Upstream acknowledges Tony Finch (University of Cambridge) as the original reporter. Affected Software/OS: bind on CentOS 7 Solution: Please install the updated packages. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-5740 BugTraq ID: 105055 http://www.securityfocus.com/bid/105055 https://security.gentoo.org/glsa/201903-13 https://lists.debian.org/debian-lts-announce/2018/08/msg00033.html https://lists.debian.org/debian-lts-announce/2021/11/msg00001.html RedHat Security Advisories: RHSA-2018:2570 https://access.redhat.com/errata/RHSA-2018:2570 RedHat Security Advisories: RHSA-2018:2571 https://access.redhat.com/errata/RHSA-2018:2571 http://www.securitytracker.com/id/1041436 SuSE Security Announcement: openSUSE-SU-2019:1532 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00026.html SuSE Security Announcement: openSUSE-SU-2019:1533 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00027.html https://usn.ubuntu.com/3769-1/ https://usn.ubuntu.com/3769-2/
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.