Lucene search

DebianDEBIAN:DLA-795-1:CB079

HistoryJan 23, 2017 - 10:56 p.m.

[SECURITY] [DLA 795-1] hesiod security update

2017-01-2322:56:48

lists.debian.org

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.0%

JSON

Package : hesiod
Version : 3.0.2-21+deb7u1
CVE IDs : CVE-2016-10151 CVE-2016-10152
Debian Bugs : #852094, 852093

It was discovered that there were two vulnerabilities in hesiod, Project
Athena's DNS-based directory service:

CVE-2016-10151: A weak SUID check allowing privilege elevation.
CVE-2016-10152: Use of a hard-coded DNS fallback domain
(athena.mit.edu) if configuration file could not be read.

For Debian 7 "Wheezy", this issue has been fixed in hesiod version
3.0.2-21+deb7u1.

We recommend that you upgrade your hesiod packages.

Regards,

  ,&#x27;&#x27;`.
 : :&#x27;  :     Chris Lamb
 `. `&#x27;`      [email protected] / chris-lamb.co.uk
   `-

OSVersionArchitecturePackageVersionFilename
Debian7armhflibtiff5-alt-dev< 4.0.2-6+deb7u9libtiff5-alt-dev_4.0.2-6+deb7u9_armhf.deb
Debian7i386libtiff5-alt-dev< 4.0.2-6+deb7u9libtiff5-alt-dev_4.0.2-6+deb7u9_i386.deb
Debian7amd64libtiff-tools< 4.0.2-6+deb7u9libtiff-tools_4.0.2-6+deb7u9_amd64.deb
Debian7amd64libtiffxx5< 4.0.2-6+deb7u9libtiffxx5_4.0.2-6+deb7u9_amd64.deb
Debian7alllibtiff-doc< 4.0.2-6+deb7u9libtiff-doc_4.0.2-6+deb7u9_all.deb
Debian7amd64libtiff-opengl< 4.0.2-6+deb7u9libtiff-opengl_4.0.2-6+deb7u9_amd64.deb
Debian7armellibtiff5< 4.0.2-6+deb7u9libtiff5_4.0.2-6+deb7u9_armel.deb
Debian7i386libtiffxx5< 4.0.2-6+deb7u9libtiffxx5_4.0.2-6+deb7u9_i386.deb
Debian7amd64libtiff5< 4.0.2-6+deb7u9libtiff5_4.0.2-6+deb7u9_amd64.deb
Debian7armhflibtiff-opengl< 4.0.2-6+deb7u9libtiff-opengl_4.0.2-6+deb7u9_armhf.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	armhf	libtiff5-alt-dev	< 4.0.2-6+deb7u9	libtiff5-alt-dev_4.0.2-6+deb7u9_armhf.deb
Debian	7	i386	libtiff5-alt-dev	< 4.0.2-6+deb7u9	libtiff5-alt-dev_4.0.2-6+deb7u9_i386.deb
Debian	7	amd64	libtiff-tools	< 4.0.2-6+deb7u9	libtiff-tools_4.0.2-6+deb7u9_amd64.deb
Debian	7	amd64	libtiffxx5	< 4.0.2-6+deb7u9	libtiffxx5_4.0.2-6+deb7u9_amd64.deb
Debian	7	all	libtiff-doc	< 4.0.2-6+deb7u9	libtiff-doc_4.0.2-6+deb7u9_all.deb
Debian	7	amd64	libtiff-opengl	< 4.0.2-6+deb7u9	libtiff-opengl_4.0.2-6+deb7u9_amd64.deb
Debian	7	armel	libtiff5	< 4.0.2-6+deb7u9	libtiff5_4.0.2-6+deb7u9_armel.deb
Debian	7	i386	libtiffxx5	< 4.0.2-6+deb7u9	libtiffxx5_4.0.2-6+deb7u9_i386.deb
Debian	7	amd64	libtiff5	< 4.0.2-6+deb7u9	libtiff5_4.0.2-6+deb7u9_amd64.deb
Debian	7	armhf	libtiff-opengl	< 4.0.2-6+deb7u9	libtiff-opengl_4.0.2-6+deb7u9_armhf.deb