Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-201903-13
HistoryMar 14, 2019 - 12:00 a.m.

BIND: Multiple vulnerabilities

2019-03-1400:00:00
Gentoo Foundation
security.gentoo.org
157

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.953

Percentile

99.4%

JSON

Background

BIND (Berkeley Internet Name Domain) is a Name Server.

Description

Multiple vulnerabilities have been discovered in BIND. Please review the CVE identifiers referenced below for details.

Impact

BIND can improperly permit recursive query service to unauthorized clients possibly resulting in a Denial of Service condition or to be used in DNS reflection attacks.

Workaround

There is no known workaround at this time.

Resolution

All bind users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-dns/bind-9.12.1_p2-r1"
OSVersionArchitecturePackageVersionFilename
Gentooanyallnet-dns/bind< 9.12.1_p2-r1UNKNOWN

Related

nessus 67
fedora 9
openvas 47
altlinux 2
prion 3
ubuntu 3
f5 3
cvelist 3
debiancve 3
ubuntucve 3
osv 7
alpinelinux 3
cisa 2
cloudlinux 1
ibm 6
redhatcve 3
slackware 2
cve 3
nvd 3
amazon 4
veracode 3
mageia 1
centos 3
redhat 3
oraclelinux 4
checkpoint_advisories 1
debian 2
rosalinux 1
suse 4
nessus
nessus
GLSA-201903-13 : BIND: Multiple vulnerabilities
2019-03-14 00:00:00
Fedora 28 : 32:bind (2018-5417ca3713)
2019-01-03 00:00:00
Fedora 27 : 32:bind (2018-90f8fbd58e)
2018-08-23 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: bind-9.11.4-10.P2.fc28
2018-10-04 20:33:54
[SECURITY] Fedora 28 Update: bind-9.11.4-5.P1.fc28
2018-08-14 21:14:26
[SECURITY] Fedora 27 Update: bind-9.11.4-3.P2.fc27
2018-10-14 23:30:38
openvas
openvas
Fedora Update for bind FEDORA-2018-f22b937f52
2018-10-05 00:00:00
Fedora Update for bind FEDORA-2018-5417ca3713
2018-08-15 00:00:00
Fedora Update for bind FEDORA-2018-54d84b0b0c
2018-10-15 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package bind version 9.11.4.P1-alt1
2018-08-13 00:00:00
Security fix for the ALT Linux 8 package bind version 9.10.8.P1-alt1
2019-08-26 00:00:00
prion
prion
Design/Logic Flaw
2019-01-16 20:29:00
Design/Logic Flaw
2019-01-16 20:29:00
Design/Logic Flaw
2019-01-16 20:29:00
ubuntu
ubuntu
Bind vulnerability
2018-06-13 00:00:00
Bind vulnerability
2018-09-20 00:00:00
Bind vulnerability
2018-10-01 00:00:00
f5
f5
K75501540 : BIND vulnerability CVE-2018-5738
2018-06-13 00:00:00
K04713734 : BIND vulnerability CVE-2018-5741
2018-10-15 00:00:00
K98528405 : BIG-IP BIND vulnerability CVE-2018-5740
2018-08-27 00:00:00
cvelist
cvelist
CVE-2018-5738 Some versions of BIND can improperly permit recursive query service to unauthorized clients
2019-01-16 20:00:00
CVE-2018-5740 A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named
2019-01-16 20:00:00
CVE-2018-5741 Update policies krb5-subdomain and ms-subdomain do not enforce controls promised in their documentation
2019-01-16 20:00:00
debiancve
debiancve
CVE-2018-5738
2019-01-16 20:29:00
CVE-2018-5740
2019-01-16 20:29:01
CVE-2018-5741
2019-01-16 20:29:01
ubuntucve
ubuntucve
CVE-2018-5738
2018-06-12 00:00:00
CVE-2018-5740
2018-08-09 00:00:00
CVE-2018-5741
2019-01-16 00:00:00
osv
osv
CVE-2018-5738
2019-01-16 20:29:00
CGA-hq54-9xc3-682f
2024-06-06 12:27:50
CGA-83vm-p559-3ffh
2024-06-06 12:25:07
alpinelinux
alpinelinux
CVE-2018-5738
2019-01-16 20:29:00
CVE-2018-5741
2019-01-16 20:29:01
CVE-2018-5740
2019-01-16 20:29:01
cisa
cisa
ISC Releases Security Advisory for BIND
2018-06-13 00:00:00
ISC Releases Security Advisory for BIND
2018-09-19 00:00:00
cloudlinux
cloudlinux
Fixed CVE-2018-5741 in bind
2022-07-11 17:39:56
ibm
ibm
Security Bulletin: IBM i is affected by networking BIND vulnerability CVE-2018-5741
2019-12-18 14:26:38
Security Bulletin: Publicly disclosed vulnerability from BIND affect IBM Netezza Host Management
2019-10-18 03:36:34
Security Bulletin: IBM i is affected by networking BIND vulnerability CVE-2018-5740
2019-12-18 14:26:38
redhatcve
redhatcve
CVE-2018-5738
2022-01-13 06:40:45
CVE-2018-5740
2022-01-13 06:42:03
CVE-2018-5741
2020-04-02 08:32:24
slackware
slackware
[slackware-security] bind
2018-07-12 07:05:25
[slackware-security] bind
2018-08-10 23:54:53
cve
cve
CVE-2018-5738
2019-01-16 20:29:00
CVE-2018-5741
2019-01-16 20:29:01
CVE-2018-5740
2019-01-16 20:29:01
nvd
nvd
CVE-2018-5738
2019-01-16 20:29:00
CVE-2018-5741
2019-01-16 20:29:01
CVE-2018-5740
2019-01-16 20:29:01
amazon
amazon
Medium: bind
2019-04-04 21:42:00
Medium: bind
2019-04-04 19:13:00
Important: bind
2018-09-20 18:45:00
veracode
veracode
Authorization Bypass
2019-08-08 00:07:41
Denial Of Service (DoS)
2019-01-17 06:06:16
Denial Of Service (DoS)
2019-01-15 09:25:37
mageia
mageia
Updated bind packages fix security vulnerability
2018-08-24 02:35:07
centos
centos
bind security update
2019-08-30 02:35:20
bind security update
2018-08-28 15:48:00
bind security update
2018-08-28 15:39:55
redhat
redhat
(RHSA-2019:2057) Moderate: bind security, bug fix, and enhancement update
2019-08-06 07:56:21
(RHSA-2018:2571) Important: bind security update
2018-08-27 14:11:31
(RHSA-2018:2570) Important: bind security update
2018-08-27 14:10:35
oraclelinux
oraclelinux
bind security update
2022-02-03 00:00:00
bind security update
2018-08-27 00:00:00
bind security update
2018-08-27 00:00:00
checkpoint_advisories
checkpoint_advisories
ISC BIND deny-answer-aliases Assertion Failure Denial of Service (CVE-2018-5740)
2019-02-20 00:00:00
debian
debian
[SECURITY] [DLA 1485-1] bind9 security update
2018-08-30 20:15:31
[SECURITY] [DLA 2807-1] bind9 security update
2021-11-02 01:06:28
rosalinux
rosalinux
Advisory ROSA-SA-2021-1803
2021-07-02 16:31:31
suse
suse
Security update for bind (important)
2019-06-10 00:00:00
Security update for bind (important)
2019-06-10 00:00:00
Security update for bind (moderate)
2020-10-20 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.953

Percentile

99.4%

JSON
Related for GLSA-201903-13
nessus67fedora9openvas47altlinux2prion3ubuntu3f53cvelist3debiancve3ubuntucve3osv7alpinelinux3cisa2cloudlinux1ibm6redhatcve3slackware2cve3nvd3amazon4veracode3mageia1centos3redhat3oraclelinux4checkpoint_advisories1debian2rosalinux1suse4