EulerOS Virtualization 2.10.0 bind (EulerOS-SA-2024-1980) contains vulnerabilities related to DNS protocol and denial of service attacks
Reporter | Title | Published | Views | Family All 199 |
---|---|---|---|---|
![]() | FreeBSD : DNSSEC validators -- denial-of-service/CPU exhaustion from KeyTrap and NSEC3 vulnerabilities (21a854cc-cac1-11ee-b7a7-353f1e043d9a) | 15 Feb 202400:00 | – | nessus |
![]() | Photon OS 3.0: Dnsmasq PHSA-2024-3.0-0731 | 24 Jul 202400:00 | – | nessus |
![]() | Photon OS 5.0: Dnsmasq PHSA-2024-5.0-0215 | 24 Jul 202400:00 | – | nessus |
![]() | RHEL 8 : dnsmasq (RHSA-2024:3929) | 13 Jun 202400:00 | – | nessus |
![]() | Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Bind vulnerabilities (USN-6723-1) | 9 Apr 202400:00 | – | nessus |
![]() | AlmaLinux 8 : unbound (ALSA-2024:0965) | 28 Feb 202400:00 | – | nessus |
![]() | AlmaLinux 8 : dnsmasq (ALSA-2024:1335) | 18 Mar 202400:00 | – | nessus |
![]() | EulerOS 2.0 SP9 : unbound (EulerOS-SA-2024-1500) | 9 Apr 202400:00 | – | nessus |
![]() | CentOS 8 : dnsmasq (CESA-2024:1335) | 14 Mar 202400:00 | – | nessus |
![]() | EulerOS 2.0 SP12 : systemd (EulerOS-SA-2024-2252) | 20 Aug 202400:00 | – | nessus |
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##
include('compat.inc');
if (description)
{
script_id(202682);
script_version("1.2");
script_set_attribute(attribute:"plugin_modification_date", value:"2024/07/26");
script_cve_id("CVE-2023-50387", "CVE-2023-50868");
script_xref(name:"IAVA", value:"2024-A-0103-S");
script_name(english:"EulerOS Virtualization 2.10.0 : bind (EulerOS-SA-2024-1980)");
script_set_attribute(attribute:"synopsis", value:
"The remote EulerOS Virtualization host is missing multiple security updates.");
script_set_attribute(attribute:"description", value:
"According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is
affected by the following vulnerabilities :
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote
attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the
'KeyTrap' issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the
protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG
records.(CVE-2023-50387)
The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped)
allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC
responses in a random subdomain attack, aka the 'NSEC3' issue. The RFC 5155 specification implies that an
algorithm must perform thousands of iterations of a hash function in certain situations.(CVE-2023-50868)
Tenable has extracted the preceding description block directly from the EulerOS Virtualization bind security advisory.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
# https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2024-1980
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?19d7d294");
script_set_attribute(attribute:"solution", value:
"Update the affected bind packages.");
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2023-50387");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"exploit_available", value:"false");
script_set_attribute(attribute:"vuln_publication_date", value:"2024/02/13");
script_set_attribute(attribute:"patch_publication_date", value:"2024/07/19");
script_set_attribute(attribute:"plugin_publication_date", value:"2024/07/18");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:bind");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:bind-chroot");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:bind-export-libs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:bind-libs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:bind-libs-lite");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:bind-pkcs11");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:bind-utils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:python3-bind");
script_set_attribute(attribute:"cpe", value:"cpe:/o:huawei:euleros:uvp:2.10.0");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_set_attribute(attribute:"stig_severity", value:"I");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Huawei Local Security Checks");
script_copyright(english:"This script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/EulerOS/release", "Host/EulerOS/rpm-list", "Host/EulerOS/uvp_version");
exit(0);
}
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var _release = get_kb_item("Host/EulerOS/release");
if (isnull(_release) || _release !~ "^EulerOS") audit(AUDIT_OS_NOT, "EulerOS");
var uvp = get_kb_item("Host/EulerOS/uvp_version");
if (uvp != "2.10.0") audit(AUDIT_OS_NOT, "EulerOS Virtualization 2.10.0");
if (!get_kb_item("Host/EulerOS/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
var cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "aarch64" >!< cpu && "x86" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "EulerOS", cpu);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "x86" >!< cpu) audit(AUDIT_ARCH_NOT, "i686 / x86_64", cpu);
var flag = 0;
var pkgs = [
"bind-9.11.21-4.h24.r1.eulerosv2r10",
"bind-chroot-9.11.21-4.h24.r1.eulerosv2r10",
"bind-export-libs-9.11.21-4.h24.r1.eulerosv2r10",
"bind-libs-9.11.21-4.h24.r1.eulerosv2r10",
"bind-libs-lite-9.11.21-4.h24.r1.eulerosv2r10",
"bind-pkcs11-9.11.21-4.h24.r1.eulerosv2r10",
"bind-utils-9.11.21-4.h24.r1.eulerosv2r10",
"python3-bind-9.11.21-4.h24.r1.eulerosv2r10"
];
foreach (var pkg in pkgs)
if (rpm_check(release:"EulerOS-2.0", reference:pkg)) flag++;
if (flag)
{
security_report_v4(
port : 0,
severity : SECURITY_HOLE,
extra : rpm_report_get()
);
exit(0);
}
else
{
var tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "bind");
}
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo