Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline

openSUSE Security Update : bind (openSUSE-2015-600)

🗓️ 23 Sep 2015 00:00:00Reported by This script is Copyright (C) 2015-2021 Tenable Network Security, Inc.Type 
nessus
 nessus🔗 www.tenable.com👁 27 Views

The remote openSUSE host is missing a security update. BIND was updated to fix a denial of service against servers performing validation on DNSSEC-signed records (CVE-2015-5722, bsc#944066)

Show more
Related
Refs
Code
ReporterTitlePublishedViews
Family
SUSE Linux		Security update for bind (important)
22 Sep 201511:11
–suse
SUSE Linux		Security update for bind (important)
2 Sep 201523:10
–suse
SUSE Linux		Security update for bind (important)
1 Oct 201522:09
–suse
SUSE Linux		Security update for bind (important)
2 Sep 201523:09
–suse
SUSE Linux		Security update for bind (important)
4 Sep 201518:09
–suse
SUSE Linux		Security update for bind (important)
25 Jan 201615:11
–suse
Check Point Advisories		ISC BIND DNSSEC Key Parsing buffer.c Denial of Service (CVE-2015-5722)
7 Oct 201500:00
–checkpoint_advisories
RedHat Linux		(RHSA-2015:1705) Important: bind security update
3 Sep 201500:00
–redhat
RedHat Linux		(RHSA-2015:1706) Important: bind security update
3 Sep 201500:00
–redhat
RedHat Linux		(RHSA-2015:1707) Important: bind97 security update
3 Sep 201500:00
–redhat
Rows per page
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from openSUSE Security Update openSUSE-2015-600.
#
# The text description of this plugin is (C) SUSE LLC.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(86093);
  script_version("2.6");
  script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/19");

  script_cve_id("CVE-2015-5722");

  script_name(english:"openSUSE Security Update : bind (openSUSE-2015-600)");
  script_summary(english:"Check for the openSUSE-2015-600 patch");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote openSUSE host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"BIND was updated to fix a denial of service against servers performing
validation on DNSSEC-signed records (CVE-2015-5722, bsc#944066)."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.opensuse.org/show_bug.cgi?id=944066"
  );
  script_set_attribute(attribute:"solution", value:"Update the affected bind packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:bind");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:bind-chrootenv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:bind-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:bind-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:bind-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:bind-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:bind-libs-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:bind-libs-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:bind-libs-debuginfo-32bit");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:bind-lwresd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:bind-lwresd-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:bind-utils");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:bind-utils-debuginfo");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:13.1");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:13.2");

  script_set_attribute(attribute:"patch_publication_date", value:"2015/09/15");
  script_set_attribute(attribute:"plugin_publication_date", value:"2015/09/23");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2015-2021 Tenable Network Security, Inc.");
  script_family(english:"SuSE Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE");
if (release !~ "^(SUSE13\.1|SUSE13\.2)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "13.1 / 13.2", release);
if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

ourarch = get_kb_item("Host/cpu");
if (!ourarch) audit(AUDIT_UNKNOWN_ARCH);
if (ourarch !~ "^(i586|i686|x86_64)$") audit(AUDIT_ARCH_NOT, "i586 / i686 / x86_64", ourarch);

flag = 0;

if ( rpm_check(release:"SUSE13.1", reference:"bind-9.9.4P2-2.17.1") ) flag++;
if ( rpm_check(release:"SUSE13.1", reference:"bind-chrootenv-9.9.4P2-2.17.1") ) flag++;
if ( rpm_check(release:"SUSE13.1", reference:"bind-debuginfo-9.9.4P2-2.17.1") ) flag++;
if ( rpm_check(release:"SUSE13.1", reference:"bind-debugsource-9.9.4P2-2.17.1") ) flag++;
if ( rpm_check(release:"SUSE13.1", reference:"bind-devel-9.9.4P2-2.17.1") ) flag++;
if ( rpm_check(release:"SUSE13.1", reference:"bind-libs-9.9.4P2-2.17.1") ) flag++;
if ( rpm_check(release:"SUSE13.1", reference:"bind-libs-debuginfo-9.9.4P2-2.17.1") ) flag++;
if ( rpm_check(release:"SUSE13.1", reference:"bind-lwresd-9.9.4P2-2.17.1") ) flag++;
if ( rpm_check(release:"SUSE13.1", reference:"bind-lwresd-debuginfo-9.9.4P2-2.17.1") ) flag++;
if ( rpm_check(release:"SUSE13.1", reference:"bind-utils-9.9.4P2-2.17.1") ) flag++;
if ( rpm_check(release:"SUSE13.1", reference:"bind-utils-debuginfo-9.9.4P2-2.17.1") ) flag++;
if ( rpm_check(release:"SUSE13.1", cpu:"x86_64", reference:"bind-libs-32bit-9.9.4P2-2.17.1") ) flag++;
if ( rpm_check(release:"SUSE13.1", cpu:"x86_64", reference:"bind-libs-debuginfo-32bit-9.9.4P2-2.17.1") ) flag++;
if ( rpm_check(release:"SUSE13.2", reference:"bind-9.9.6P1-2.10.1") ) flag++;
if ( rpm_check(release:"SUSE13.2", reference:"bind-chrootenv-9.9.6P1-2.10.1") ) flag++;
if ( rpm_check(release:"SUSE13.2", reference:"bind-debuginfo-9.9.6P1-2.10.1") ) flag++;
if ( rpm_check(release:"SUSE13.2", reference:"bind-debugsource-9.9.6P1-2.10.1") ) flag++;
if ( rpm_check(release:"SUSE13.2", reference:"bind-devel-9.9.6P1-2.10.1") ) flag++;
if ( rpm_check(release:"SUSE13.2", reference:"bind-libs-9.9.6P1-2.10.1") ) flag++;
if ( rpm_check(release:"SUSE13.2", reference:"bind-libs-debuginfo-9.9.6P1-2.10.1") ) flag++;
if ( rpm_check(release:"SUSE13.2", reference:"bind-lwresd-9.9.6P1-2.10.1") ) flag++;
if ( rpm_check(release:"SUSE13.2", reference:"bind-lwresd-debuginfo-9.9.6P1-2.10.1") ) flag++;
if ( rpm_check(release:"SUSE13.2", reference:"bind-utils-9.9.6P1-2.10.1") ) flag++;
if ( rpm_check(release:"SUSE13.2", reference:"bind-utils-debuginfo-9.9.6P1-2.10.1") ) flag++;
if ( rpm_check(release:"SUSE13.2", cpu:"x86_64", reference:"bind-libs-32bit-9.9.6P1-2.10.1") ) flag++;
if ( rpm_check(release:"SUSE13.2", cpu:"x86_64", reference:"bind-libs-debuginfo-32bit-9.9.6P1-2.10.1") ) flag++;

if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
  else security_hole(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "bind / bind-chrootenv / bind-debuginfo / bind-debugsource / etc");
}

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
23 Sep 2015 00:00Current
7.5High risk
Vulners AI Score7.5
CVSS27.8
EPSS0.964
opensusesecurity updatebinddenial of servicednssec-signed recordscve-2015-5722bsc#944066
27
.json
Report