An update of the bindutils package has been released.

According to the versions of the bind packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - A programming error in the nxdomain-redirect feature     can cause an assertion failure in query.c if the     alternate namespace used by nxdomain-redirect is a     descendant of a zone that is served locally. The most     likely scenario where this might occur is if the     server, in addition to performing NXDOMAIN redirection     for recursive clients, is also serving a local copy of     the root zone or using mirroring to provide the root     zone, although other configurations are also possible.
    Versions affected: BIND 9.12.0-> 9.12.4, 9.14.0. Also     affects all releases in the 9.13 development     branch.(CVE-2019-6467)

  - With pipelining enabled each incoming query on a TCP     connection requires a similar resource allocation to a     query received via UDP or via TCP without pipelining     enabled. A client using a TCP-pipelined connection to a     server could consume more resources than the server has     been provisioned to handle. When a TCP connection with     a large number of pipelined queries is closed, the load     on the server releasing these multiple resources can     cause it to become unresponsive, even for queries that     can be answered authoritatively or from cache. (This is     most likely to be perceived as an intermittent server     problem).(CVE-2019-6477)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

9.12.4-P1より前の9.12.x、または9.14.1より前の9.13.xのバージョンのISC BINDは、query.cのnxdomain-redirect機能のDoS脆弱性の影響を受けます。認証されていないリモートの攻撃者がこれを悪用し、アプリケーションの応答を停止させる可能性があります。

ISC BIND 9.12.4-P1 之前的 9.12.x 版，或 9.14.1 之前的 9.13.x 版在 query.c 的 nxdomain-redirect 功能中，受到一個 DoS 弱點影響。未經驗證的遠端攻擊者可惡意利用此問題，造成應用程式停止回應。

ISC BIND 9.12.4-P1 之前的 9.12.x 版，或 9.14.1 之前的 9.13.x 版在 query.c 的 nxdomain-redirect 功能中，受到一个 DoS 漏洞影响。未经身份验证的远程攻击者可利用此问题造成应用程序停止响应。

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - With pipelining enabled each incoming query on a TCP     connection requires a similar resource allocation to a     query received via UDP or via TCP without pipelining     enabled. A client using a TCP-pipelined connection to a     server could consume more resources than the server has     been provisioned to handle. When a TCP connection with     a large number of pipelined queries is closed, the load     on the server releasing these multiple resources can     cause it to become unresponsive, even for queries that     can be answered authoritatively or from cache. (This is     most likely to be perceived as an intermittent server     problem).(CVE-2019-6477)

  - A programming error in the nxdomain-redirect feature     can cause an assertion failure in query.c if the     alternate namespace used by nxdomain-redirect is a     descendant of a zone that is served locally. The most     likely scenario where this might occur is if the     server, in addition to performing NXDOMAIN redirection     for recursive clients, is also serving a local copy of     the root zone or using mirroring to provide the root     zone, although other configurations are also possible.
    Versions affected: BIND 9.12.0-> 9.12.4, 9.14.0. Also     affects all releases in the 9.13 development     branch.(CVE-2019-6467)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ISC BIND versions 9.12.x prior to 9.12.4-P1, or 9.13.x prior to 9.14.1 are affected by a DoS vulnerability in the nxdomain-redirect feature in the query.c. An unauthenticated, remote attacker can exploit this issue, to cause the application to stop responding.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
203761	Photon OS 3.0: Bindutils PHSA-2020-3.0-0049	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	medium
135142	EulerOS Virtualization for ARM 64 3.0.6.0 : bind (EulerOS-SA-2020-1355)	Nessus	Huawei Local Security Checks	2020/4/2	2024/3/20	high
124588	ISC BIND 9.12.x <9.12.4-P1、9.13.x <9.14.1のサービス拒否の脆弱性	Nessus	DNS	2019/5/3	2020/5/22	high
124588	ISC BIND 9.12.x < 9.12.4-P1、9.13.x < 9.14.1 拒絕服務弱點	Nessus	DNS	2019/5/3	2020/5/22	high
124588	ISC BIND 9.12.x < 9.12.4-P1、9.13.x < 9.14.1 拒绝服务漏洞	Nessus	DNS	2019/5/3	2020/5/22	high
133975	EulerOS 2.0 SP8 : bind (EulerOS-SA-2020-1141)	Nessus	Huawei Local Security Checks	2020/2/25	2024/3/26	high
132987	Photon OS 2.0: Bindutils PHSA-2020-2.0-0199	Nessus	PhotonOS Local Security Checks	2020/1/16	2024/7/23	high
124588	ISC BIND 9.12.x < 9.12.4-P1, 9.13.x < 9.14.1 Denial of Service Vulnerability	Nessus	DNS	2019/5/3	2020/5/22	high

检测

插件搜索

medium

high

high

high

high

high

high

high