Mandriva Linux Security Advisory : bind (MDVSA-2014:238)

high Nessus Plugin ID 79983

Language:

Synopsis

The remote Mandriva Linux host is missing one or more security updates.

Description

Updated bind packages fix security vulnerability :

By making use of maliciously-constructed zones or a rogue server, an attacker can exploit an oversight in the code BIND 9 uses to follow delegations in the Domain Name Service, causing BIND to issue unlimited queries in an attempt to follow the delegation. This can lead to resource exhaustion and denial of service (up to and including termination of the named server process) (CVE-2014-8500).

Solution

Update the affected packages.

Plugin Details

Severity: High

ID: 79983

File Name: mandriva_MDVSA-2014-238.nasl

Version: 1.9

Type: local

Family: Mandriva Local Security Checks

Published: 12/15/2014

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Information

CPE: p-cpe:/a:mandriva:linux:bind, p-cpe:/a:mandriva:linux:bind-devel, p-cpe:/a:mandriva:linux:bind-doc, p-cpe:/a:mandriva:linux:bind-sdb, p-cpe:/a:mandriva:linux:bind-utils, cpe:/o:mandriva:business_server:1

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 12/13/2014

Reference Information

CVE: CVE-2014-8500

BID: 71590

MDVSA: 2014:238

Detections

Analytics