Lucene search

K
mageiaGentoo FoundationMGASA-2018-0353
HistoryAug 24, 2018 - 2:35 a.m.

Updated bind packages fix security vulnerability

2018-08-2402:35:07
Gentoo Foundation
advisories.mageia.org
15

0.953 High

EPSS

Percentile

99.3%

Updated bind packages fix security vulnerability: In ISC BIND, a defect in thie “deny-answer-aliases” feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Accidental or deliberate triggering of this defect will cause a REQUIRE assertion failure in named, causing the named process to stop execution and resulting in denial of service to clients (CVE-2018-5740). Note that only servers which have explicitly enabled the “deny-answer-aliases” feature are at risk and disabling the feature prevents exploitation.

OSVersionArchitecturePackageVersionFilename
Mageia6noarchbind< 9.10.8.P1-1bind-9.10.8.P1-1.mga6