New bind packages are available for Slackware 14.0, 14.1, 14.2, and
-current to fix a denial-of-service security issue.

According to its self-reported version, the instance of ISC BIND 9 running on the remote name server is between 9.11.0 and 9.11.7, 9.11.3-S1 and 9.11.7-S1, 9.12.0 and 9.12.4-P1, 9.13.x, 9.14.0 and 9.14.3, or 9.15 It is, therefore, affected by a race condition vulnerability, which may cause BIND to exit with an assertion failure when discarding malformed packets.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

- New [minor BIND     release](https://downloads.isc.org/isc/bind9/9.11.8/RELE     ASE-NOTES-bind-9.11.8.html), fixing also security bug.

  - dnsperf update with TCP support

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Update to [BIND     9.11.10](https://downloads.isc.org/isc/bind9/9.11.10/REL     EASE-NOTES-bind-9.11.10.html)

  - Updates     [dnsperf](https://github.com/DNS-OARC/dnsperf/blob/v2.3.
    2/CHANGES)

----

  - New [minor BIND     release](https://downloads.isc.org/isc/bind9/9.11.8/RELE     ASE-NOTES-bind-9.11.8.html), fixing also security bug.

  - dnsperf update with TCP support

----

Fixes occasional releases of obtained IP address. Detects jumps in time backward and refreshes address lease if time went back.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the bindutils package has been released.

This update for bind fixes the following issues :

Security issues fixed :

CVE-2019-6465: Fixed an issue where controls for zone transfers may not be properly applied to Dynamically Loadable Zones (bsc#1126069).

CVE-2019-6471: Fixed a reachable assert in dispatch.c. (bsc#1138687)

CVE-2018-5745: Fixed a denial of service vulnerability if a trust anchor rolls over to an unsupported key algorithm when using managed-keys (bsc#1126068).

CVE-2018-5743: Fixed a denial of service vulnerability which could be caused by to many simultaneous TCP connections (bsc#1133185).

CVE-2018-5740: Fixed a denial of service vulnerability in the 'deny-answer-aliases' feature (bsc#1104129).

Non-security issues fixed: Don't rely on /etc/insserv.conf anymore for proper dependencies against nss-lookup.target in named.service and lwresd.service (bsc#1118367, bsc#1118368).

Fix FIPS related regression (bsc#1128220).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
126092	Slackware 14.0 / 14.1 / 14.2 / current : bind (SSA:2019-171-01)	Nessus	Slackware Local Security Checks	2019/6/21	2024/5/15	medium
126339	ISC BIND Race Condition Vulnerability (CVE-2019-6471)	Nessus	DNS	2019/6/28	2019/11/4	medium
126840	Fedora 30 : 12:dhcp / 32:bind / bind-dyndb-ldap / dnsperf (2019-f72801c260)	Nessus	Fedora Local Security Checks	2019/7/22	2024/5/9	medium
128793	Fedora 29 : 12:dhcp / 32:bind / bind-dyndb-ldap / dnsperf (2019-d04f66e595)	Nessus	Fedora Local Security Checks	2019/9/16	2024/4/26	medium
132987	Photon OS 2.0: Bindutils PHSA-2020-2.0-0199	Nessus	PhotonOS Local Security Checks	2020/1/16	2024/7/23	high
203761	Photon OS 3.0: Bindutils PHSA-2020-3.0-0049	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	medium
129526	SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2019:2502-1)	Nessus	SuSE Local Security Checks	2019/10/2	2021/1/13	medium

检测

插件搜索

medium

medium

medium

medium

high

medium

medium