Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
amazonAmazonALAS-2016-641
HistoryJan 19, 2016 - 12:00 p.m.

Medium: bind

2016-01-1912:00:00
alas.aws.amazon.com
12

7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.958 High

EPSS

Percentile

99.4%

JSON

Issue Overview:

Specific APL RR data could cause a server to exit due to an INSIST failure in apl_42.c when performing certain string formatting operations. (CVE-2015-8704)

CVE-2015-8705 was also issued today for bind, but the Amazon Linux AMI’s version of bind is not impacted by that CVE.

Affected Packages:

bind

Issue Correction:
Run yum update bind to update your system.

New Packages:

i686:  
    bind-9.8.2-0.37.rc1.43.amzn1.i686  
    bind-chroot-9.8.2-0.37.rc1.43.amzn1.i686  
    bind-devel-9.8.2-0.37.rc1.43.amzn1.i686  
    bind-debuginfo-9.8.2-0.37.rc1.43.amzn1.i686  
    bind-utils-9.8.2-0.37.rc1.43.amzn1.i686  
    bind-libs-9.8.2-0.37.rc1.43.amzn1.i686  
    bind-sdb-9.8.2-0.37.rc1.43.amzn1.i686  
  
src:  
    bind-9.8.2-0.37.rc1.43.amzn1.src  
  
x86_64:  
    bind-sdb-9.8.2-0.37.rc1.43.amzn1.x86_64  
    bind-libs-9.8.2-0.37.rc1.43.amzn1.x86_64  
    bind-9.8.2-0.37.rc1.43.amzn1.x86_64  
    bind-devel-9.8.2-0.37.rc1.43.amzn1.x86_64  
    bind-utils-9.8.2-0.37.rc1.43.amzn1.x86_64  
    bind-debuginfo-9.8.2-0.37.rc1.43.amzn1.x86_64  
    bind-chroot-9.8.2-0.37.rc1.43.amzn1.x86_64

Additional References

Red Hat: CVE-2015-8704

Mitre: CVE-2015-8704

OSVersionArchitecturePackageVersionFilename
Amazon Linux1i686bind< 9.8.2-0.37.rc1.43.amzn1bind-9.8.2-0.37.rc1.43.amzn1.i686.rpm
Amazon Linux1i686bind-chroot< 9.8.2-0.37.rc1.43.amzn1bind-chroot-9.8.2-0.37.rc1.43.amzn1.i686.rpm
Amazon Linux1i686bind-devel< 9.8.2-0.37.rc1.43.amzn1bind-devel-9.8.2-0.37.rc1.43.amzn1.i686.rpm
Amazon Linux1i686bind-debuginfo< 9.8.2-0.37.rc1.43.amzn1bind-debuginfo-9.8.2-0.37.rc1.43.amzn1.i686.rpm
Amazon Linux1i686bind-utils< 9.8.2-0.37.rc1.43.amzn1bind-utils-9.8.2-0.37.rc1.43.amzn1.i686.rpm
Amazon Linux1i686bind-libs< 9.8.2-0.37.rc1.43.amzn1bind-libs-9.8.2-0.37.rc1.43.amzn1.i686.rpm
Amazon Linux1i686bind-sdb< 9.8.2-0.37.rc1.43.amzn1bind-sdb-9.8.2-0.37.rc1.43.amzn1.i686.rpm
Amazon Linux1x86_64bind-sdb< 9.8.2-0.37.rc1.43.amzn1bind-sdb-9.8.2-0.37.rc1.43.amzn1.x86_64.rpm
Amazon Linux1x86_64bind-libs< 9.8.2-0.37.rc1.43.amzn1bind-libs-9.8.2-0.37.rc1.43.amzn1.x86_64.rpm
Amazon Linux1x86_64bind< 9.8.2-0.37.rc1.43.amzn1bind-9.8.2-0.37.rc1.43.amzn1.x86_64.rpm
Rows per page:
1-10 of 141

Related

nessus 40
mageia 1
openvas 28
ibm 3
archlinux 1
fedora 4
slackware 1
f5 4
cve 2
freebsd 2
prion 2
oraclelinux 7
suse 7
debiancve 2
checkpoint_advisories 2
veracode 2
ubuntucve 2
redhat 2
debian 3
ubuntu 1
centos 2
freebsd_advisory 1
aix 1
gentoo 1
openwrt 1
nessus
nessus
ISC BIND 9.3.0 < 9.9.8-P3 / 9.9.x-Sx < 9.9.8-S4 / 9.10.x < 9.10.3-P3 Multiple DoS
2016-01-26 00:00:00
Fedora 23 : bind-9.10.3-10.P3.fc23 (2016-f3517b9c4c)
2016-03-04 00:00:00
Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : bind (SSA:2016-054-01)
2016-02-24 00:00:00
mageia
mageia
Updated bind packages fix security vulnerability
2016-01-20 20:53:26
openvas
openvas
Fedora Update for bind FEDORA-2016-1
2016-02-05 00:00:00
Mageia: Security Advisory (MGASA-2016-0030)
2016-01-21 00:00:00
Slackware: Security Advisory (SSA:2016-054-01)
2022-04-21 00:00:00
ibm
ibm
Security Bulletin: IBM i is affected by networking BIND vulnerabilities (CVE-2015-8704 and CVE-2015-8705).
2019-12-18 14:26:38
Security Bulletin: Vulnerability in bind affects PowerKVM (CVE-2015-8704)
2018-06-18 01:30:37
Security Bulletin: Vulnerabilities in GNU C library (glibc), OpenSSL and BIND affect IBM Netezza Host Management
2019-10-18 03:10:29
archlinux
archlinux
bind: denial of service
2016-01-21 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: bind-9.10.3-10.P3.fc23
2016-01-24 03:35:29
[SECURITY] Fedora 22 Update: bind-9.10.3-8.P3.fc22
2016-02-02 00:56:54
[SECURITY] Fedora 23 Update: bind99-9.9.8-2.P3.fc23
2016-01-24 03:35:17
slackware
slackware
[slackware-security] bind
2016-02-23 19:50:34
f5
f5
SOL86533083 - BIND vulnerability CVE-2015-8705
2016-01-19 00:00:00
K86533083 : BIND vulnerability CVE-2015-8705
2016-01-20 00:00:00
K53445000 : BIND vulnerability CVE-2015-8704
2016-01-25 00:00:00
cve
cve
CVE-2015-8705
2016-01-20 15:59:00
CVE-2015-8704
2016-01-20 15:59:00
freebsd
freebsd
bind -- denial of service vulnerability
2016-01-19 00:00:00
bind -- denial of service vulnerability
2016-01-19 00:00:00
prion
prion
Authentication flaw
2016-01-20 15:59:00
Authentication flaw
2016-01-20 15:59:00
oraclelinux
oraclelinux
bind97 security update
2016-01-27 00:00:00
bind security update
2016-01-27 00:00:00
bind security update
2016-11-09 00:00:00
suse
suse
Security update for bind (important)
2016-01-22 14:12:28
Security update for bind (important)
2016-01-20 00:12:07
Security update for bind (important)
2016-01-20 18:11:21
debiancve
debiancve
CVE-2015-8704
2016-01-20 15:59:00
CVE-2015-8705
2016-01-20 15:59:00
checkpoint_advisories
checkpoint_advisories
ISC BIND buffer.c REQUIRE Assertion Failure Denial of Service (CVE-2015-8705)
2016-04-12 00:00:00
ISC BIND apl_42.c INSIST Assertion Failure Denial of Service (CVE-2015-8704)
2016-02-25 00:00:00
veracode
veracode
Denial Of Service (DoS)
2023-08-15 15:53:05
Denial Of Service (DoS)
2019-01-15 09:10:03
ubuntucve
ubuntucve
CVE-2015-8705
2016-01-19 00:00:00
CVE-2015-8704
2016-01-19 00:00:00
redhat
redhat
(RHSA-2016:0074) Moderate: bind97 security update
2016-01-27 00:00:00
(RHSA-2016:0073) Moderate: bind security update
2016-01-27 00:00:00
debian
debian
[SECURITY] [DSA 3449-1] bind9 security update
2016-01-19 20:45:23
[SECURITY] [DSA 3449-1] bind9 security update
2016-01-19 20:45:23
[SECURITY] [DLA 396-1] bind9 security update
2016-01-19 21:52:24
ubuntu
ubuntu
Bind vulnerability
2016-01-19 00:00:00
centos
centos
bind97 security update
2016-01-27 13:29:51
bind, caching security update
2016-01-27 13:24:33
freebsd_advisory
freebsd_advisory
FreeBSD-SA-16:08.bind
2016-01-27 00:00:00
aix
aix
Vulnerability in BIND affects AIX,Vulnerability in BIND affects VIOS
2016-04-25 10:06:21
gentoo
gentoo
BIND: Multiple vulnerabilities
2016-10-11 00:00:00
openwrt
openwrt
bind: Security update (4 CVEs)
2016-01-24 13:33:41

7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.958 High

EPSS

Percentile

99.4%

JSON
Related for ALAS-2016-641
nessus40mageia1openvas28ibm3archlinux1fedora4slackware1f54cve2freebsd2prion2oraclelinux7suse7debiancve2checkpoint_advisories2veracode2ubuntucve2redhat2debian3ubuntu1centos2freebsd_advisory1aix1gentoo1openwrt1