Search...

USN-2837-1 bind9 vulnerability | Cloud Foundry

2016-01-07T00:00:00

ID CFOUNDRY:9339B72D1E57C54E643F36D1C5947B1A
Type cloudfoundry
Reporter Cloud Foundry
Modified 2016-01-07T00:00:00

Description

USN-2837-1 bind9 vulnerability

Medium

Vendor

bind9

Versions Affected

Ubuntu 14.04

Description

It was discovered that Bind incorrectly handled responses with malformed class attributes. A remote attacker could use this issue to cause Bind to crash, resulting in a denial of service.

The Cloud Foundry project released a new Cloud Foundry rootfs, cflinuxfs2 v.1.23.0, that has the patches.

Affected Products and Versions

Severity is medium unless otherwise noted.

All versions of Cloud Foundry cflinuxfs2 prior to v.1.23.0.

Mitigation

Users of affected versions should apply the following mitigation:

The Cloud Foundry project recommends that Cloud Foundry deployments run with cflinuxfs2 v.1.23.0 or later versions.

Credit

N/A

References

<http://www.ubuntu.com/usn/usn-2837-1>
<https://bosh.io/stemcells>
<https://github.com/cloudfoundry/cf-release>

JSON Vulners Source

Initial Source

{"id": "CFOUNDRY:9339B72D1E57C54E643F36D1C5947B1A", "bulletinFamily": "software", "title": "USN-2837-1 bind9 vulnerability | Cloud Foundry", "description": "USN-2837-1 bind9 vulnerability\n\n# \n\nMedium\n\n# Vendor\n\nbind9\n\n# Versions Affected\n\n * Ubuntu 14.04 \n\n# Description\n\nIt was discovered that Bind incorrectly handled responses with malformed class attributes. A remote attacker could use this issue to cause Bind to crash, resulting in a denial of service.\n\nThe Cloud Foundry project released a new Cloud Foundry rootfs, cflinuxfs2 v.1.23.0, that has the patches.\n\n# Affected Products and Versions\n\n_Severity is medium unless otherwise noted. \n_\n\n * All versions of Cloud Foundry cflinuxfs2 prior to v.1.23.0. \n\n# Mitigation\n\nUsers of affected versions should apply the following mitigation:\n\n * The Cloud Foundry project recommends that Cloud Foundry deployments run with cflinuxfs2 v.1.23.0 or later versions. \n\n# Credit\n\nN/A\n\n# References\n\n * <http://www.ubuntu.com/usn/usn-2837-1>\n * <https://bosh.io/stemcells>\n * <https://github.com/cloudfoundry/cf-release>\n", "published": "2016-01-07T00:00:00", "modified": "2016-01-07T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://www.cloudfoundry.org/blog/usn-2837-1/", "reporter": "Cloud Foundry", "references": [], "cvelist": [], "type": "cloudfoundry", "lastseen": "2018-09-07T03:26:04", "edition": 2, "viewCount": 0, "enchantments": {"score": {"value": 0.7, "vector": "NONE", "modified": "2018-09-07T03:26:04", "rev": 2}, "dependencies": {"references": [], "modified": "2018-09-07T03:26:04", "rev": 2}, "vulnersScore": 0.7}, "affectedSoftware": []}