Lucene search

K
mageiaGentoo FoundationMGASA-2015-0082
HistoryFeb 21, 2015 - 9:03 p.m.

Updated bind packages fix CVE-2015-1349

2015-02-2121:03:39
Gentoo Foundation
advisories.mageia.org
9

5.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

0.069 Low

EPSS

Percentile

93.9%

Updated bind packages fix security vulnerability: Jan-Piet Mens discovered that the BIND DNS server would crash when processing an invalid DNSSEC key rollover, either due to an error on the zone operator’s part, or due to interference with network traffic by an attacker. This issue affects configurations with the directives “dnssec-lookaside auto;” (as enabled in the Mageia default configuration) or “dnssec-validation auto;” (CVE-2015-1349).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchbind< 9.9.6.P2-1bind-9.9.6.P2-1.mga4

5.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

0.069 Low

EPSS

Percentile

93.9%