[SECURITY] [DLA 1485-1] bind9 security update

2018-08-3020:15:31

lists.debian.org

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.953 High

EPSS

Percentile

99.3%

JSON

Package : bind9
Version : 1:9.9.5.dfsg-9+deb8u16
CVE ID : CVE-2018-5740

CVE-2018-5740
The "deny-answer-aliases" feature in BIND has a flaw which can
cause named to exit with an assertion failure.

For Debian 8 "Jessie", this problem has been fixed in version
1:9.9.5.dfsg-9+deb8u16.

We recommend that you upgrade your bind9 packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian9armhflibirs141< 1:9.10.3.dfsg.P4-12.3+deb9u10libirs141_1:9.10.3.dfsg.P4-12.3+deb9u10_armhf.deb
Debian8armhflibisccfg-export90-udeb< 1:9.9.5.dfsg-9+deb8u16libisccfg-export90-udeb_1:9.9.5.dfsg-9+deb8u16_armhf.deb
Debian9arm64libisccc140< 1:9.10.3.dfsg.P4-12.3+deb9u10libisccc140_1:9.10.3.dfsg.P4-12.3+deb9u10_arm64.deb
Debian9armhflibisccfg-export140-udeb< 1:9.10.3.dfsg.P4-12.3+deb9u10libisccfg-export140-udeb_1:9.10.3.dfsg.P4-12.3+deb9u10_armhf.deb
Debian9armelbind9-host< 1:9.10.3.dfsg.P4-12.3+deb9u10bind9-host_1:9.10.3.dfsg.P4-12.3+deb9u10_armel.deb
Debian9i386libisccfg-export140< 1:9.10.3.dfsg.P4-12.3+deb9u10libisccfg-export140_1:9.10.3.dfsg.P4-12.3+deb9u10_i386.deb
Debian9amd64libisccc-export140< 1:9.10.3.dfsg.P4-12.3+deb9u10libisccc-export140_1:9.10.3.dfsg.P4-12.3+deb9u10_amd64.deb
Debian8i386libbind9-90< 1:9.9.5.dfsg-9+deb8u16libbind9-90_1:9.9.5.dfsg-9+deb8u16_i386.deb
Debian8armhfliblwres90< 1:9.9.5.dfsg-9+deb8u16liblwres90_1:9.9.5.dfsg-9+deb8u16_armhf.deb
Debian9amd64liblwres141< 1:9.10.3.dfsg.P4-12.3+deb9u10liblwres141_1:9.10.3.dfsg.P4-12.3+deb9u10_amd64.deb

OS	Version	Architecture	Package	Version	Filename
Debian	9	armhf	libirs141	< 1:9.10.3.dfsg.P4-12.3+deb9u10	libirs141_1:9.10.3.dfsg.P4-12.3+deb9u10_armhf.deb
Debian	8	armhf	libisccfg-export90-udeb	< 1:9.9.5.dfsg-9+deb8u16	libisccfg-export90-udeb_1:9.9.5.dfsg-9+deb8u16_armhf.deb
Debian	9	arm64	libisccc140	< 1:9.10.3.dfsg.P4-12.3+deb9u10	libisccc140_1:9.10.3.dfsg.P4-12.3+deb9u10_arm64.deb
Debian	9	armhf	libisccfg-export140-udeb	< 1:9.10.3.dfsg.P4-12.3+deb9u10	libisccfg-export140-udeb_1:9.10.3.dfsg.P4-12.3+deb9u10_armhf.deb
Debian	9	armel	bind9-host	< 1:9.10.3.dfsg.P4-12.3+deb9u10	bind9-host_1:9.10.3.dfsg.P4-12.3+deb9u10_armel.deb
Debian	9	i386	libisccfg-export140	< 1:9.10.3.dfsg.P4-12.3+deb9u10	libisccfg-export140_1:9.10.3.dfsg.P4-12.3+deb9u10_i386.deb
Debian	9	amd64	libisccc-export140	< 1:9.10.3.dfsg.P4-12.3+deb9u10	libisccc-export140_1:9.10.3.dfsg.P4-12.3+deb9u10_amd64.deb
Debian	8	i386	libbind9-90	< 1:9.9.5.dfsg-9+deb8u16	libbind9-90_1:9.9.5.dfsg-9+deb8u16_i386.deb
Debian	8	armhf	liblwres90	< 1:9.9.5.dfsg-9+deb8u16	liblwres90_1:9.9.5.dfsg-9+deb8u16_armhf.deb
Debian	9	amd64	liblwres141	< 1:9.10.3.dfsg.P4-12.3+deb9u10	liblwres141_1:9.10.3.dfsg.P4-12.3+deb9u10_amd64.deb