Test ID:	1.3.6.1.4.1.25623.1.1.13.2020.234.01
Category:	Slackware Local Security Checks
Title:	Slackware: Security Advisory (SSA:2020-234-01)
Summary:	The remote host is missing an update for the 'bind' package(s) announced via the SSA:2020-234-01 advisory.
Description:	Summary: The remote host is missing an update for the 'bind' package(s) announced via the SSA:2020-234-01 advisory. Vulnerability Insight: New bind packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: +--------------------------+ patches/packages/bind-9.11.22-i586-1_slack14.2.txz: Upgraded. This update fixes three security issues: 'update-policy' rules of type 'subdomain' were incorrectly treated as 'zonesub' rules, which allowed keys used in 'subdomain' rules to update names outside of the specified subdomains. The problem was fixed by making sure 'subdomain' rules are again processed as described in the ARM. When BIND 9 was compiled with native PKCS#11 support, it was possible to trigger an assertion failure in code determining the number of bits in the PKCS#11 RSA public key with a specially crafted packet. It was possible to trigger an assertion failure when verifying the response to a TSIG-signed request. For more information, see: [links moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'bind' package(s) on Slackware 14.0, Slackware 14.1, Slackware 14.2, Slackware current. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-8622 https://kb.isc.org/docs/cve-2020-8622 https://security.netapp.com/advisory/ntap-20200827-0003/ https://www.synology.com/security/advisory/Synology_SA_20_19 Debian Security Information: DSA-4752 (Google Search) https://www.debian.org/security/2020/dsa-4752 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKAMJZXR66P6S5LEU4SN7USSNCWTXEXP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DQN62GBMCIC5AY4KYADGXNKVY6AJKSJE/ https://security.gentoo.org/glsa/202008-19 https://www.oracle.com/security-alerts/cpuoct2021.html https://lists.debian.org/debian-lts-announce/2020/08/msg00053.html SuSE Security Announcement: openSUSE-SU-2020:1699 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html SuSE Security Announcement: openSUSE-SU-2020:1701 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html https://usn.ubuntu.com/4468-1/ https://usn.ubuntu.com/4468-2/ Common Vulnerability Exposure (CVE) ID: CVE-2020-8623 https://kb.isc.org/docs/cve-2020-8623 Common Vulnerability Exposure (CVE) ID: CVE-2020-8624 https://kb.isc.org/docs/cve-2020-8624
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.