CentOS Update for bind CESA-2019:0194 centos7
🗓️ 02 Feb 2019 00:00:00Reported by Copyright (C) 2019 Greenbone AGType
openvas🔗 plugins.openvas.org👁 27 Views
| Reporter | Title | Published | Views | Family All 27 |
|---|---|---|---|---|
| Amazon Linux 2 : bind (ALAS-2019-1170) | 8 Mar 201900:00 | – | nessus | |
| CentOS 7 : bind (CESA-2019:0194) | 4 Feb 201900:00 | – | nessus | |
| MiracleLinux 7 : bind-9.9.4-73.0.1.el7.AXS7 (AXSA:2019-3820:02) | 16 Jan 202600:00 | – | nessus | |
| NewStart CGSL CORE 5.04 / MAIN 5.04 : bind Vulnerability (NS-SA-2019-0063) | 12 Aug 201900:00 | – | nessus | |
| Oracle Linux 7 : bind (ELSA-2019-0194) | 31 Jan 201900:00 | – | nessus | |
| RHEL 7 : bind (RHSA-2019:0194) | 30 Jan 201900:00 | – | nessus | |
| Scientific Linux Security Update : bind on SL7.x x86_64 (20190129) | 30 Jan 201900:00 | – | nessus | |
| Medium: bind | 7 Mar 201900:00 | – | amazon | |
| Security Bulletin: A vulnerability in Bind affects PowerKVM | 4 Mar 201905:55 | – | ibm | |
| bind security update | 1 Feb 201923:13 | – | centos |
10
# SPDX-FileCopyrightText: 2019 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.883000");
script_version("2023-07-10T08:07:43+0000");
script_cve_id("CVE-2018-5742");
script_tag(name:"cvss_base", value:"4.3");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:N/I:N/A:P");
script_tag(name:"last_modification", value:"2023-07-10 08:07:43 +0000 (Mon, 10 Jul 2023)");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2019-11-07 18:33:00 +0000 (Thu, 07 Nov 2019)");
script_tag(name:"creation_date", value:"2019-02-02 04:04:08 +0100 (Sat, 02 Feb 2019)");
script_name("CentOS Update for bind CESA-2019:0194 centos7");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2019 Greenbone AG");
script_family("CentOS Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/centos", "ssh/login/rpms", re:"ssh/login/release=CentOS7");
script_xref(name:"CESA", value:"2019:0194");
script_xref(name:"URL", value:"http://lists.centos.org/pipermail/centos-announce/2019-February/023182.html");
script_tag(name:"summary", value:"The remote host is missing an update for the 'bind'
package(s) announced via the CESA-2019:0194 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain
Name System (DNS) protocols. BIND includes a DNS server (named) a resolver
library (routines for applications to use when interfacing with DNS) and
tools for verifying that the DNS server is operating correctly.
Security Fix(es):
* bind: Crash from assertion error when debug log level is 10 and log
entries meet buffer boundary (CVE-2018-5742)
For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.");
script_tag(name:"affected", value:"bind on CentOS 7.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release) exit(0);
res = "";
if(release == "CentOS7")
{
if ((res = isrpmvuln(pkg:"bind", rpm:"bind~9.9.4~73.el7_6", rls:"CentOS7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"bind-chroot", rpm:"bind-chroot~9.9.4~73.el7_6", rls:"CentOS7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"bind-devel", rpm:"bind-devel~9.9.4~73.el7_6", rls:"CentOS7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"bind-libs", rpm:"bind-libs~9.9.4~73.el7_6", rls:"CentOS7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"bind-libs-lite", rpm:"bind-libs-lite~9.9.4~73.el7_6", rls:"CentOS7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"bind-license", rpm:"bind-license~9.9.4~73.el7_6", rls:"CentOS7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"bind-lite-devel", rpm:"bind-lite-devel~9.9.4~73.el7_6", rls:"CentOS7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"bind-pkcs11", rpm:"bind-pkcs11~9.9.4~73.el7_6", rls:"CentOS7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"bind-pkcs11-devel", rpm:"bind-pkcs11-devel~9.9.4~73.el7_6", rls:"CentOS7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"bind-pkcs11-libs", rpm:"bind-pkcs11-libs~9.9.4~73.el7_6", rls:"CentOS7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"bind-pkcs11-utils", rpm:"bind-pkcs11-utils~9.9.4~73.el7_6", rls:"CentOS7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"bind-sdb", rpm:"bind-sdb~9.9.4~73.el7_6", rls:"CentOS7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"bind-sdb-chroot", rpm:"bind-sdb-chroot~9.9.4~73.el7_6", rls:"CentOS7")) != NULL)
{
security_message(data:res);
exit(0);
}
if ((res = isrpmvuln(pkg:"bind-utils", rpm:"bind-utils~9.9.4~73.el7_6", rls:"CentOS7")) != NULL)
{
security_message(data:res);
exit(0);
}
if (__pkg_match) exit(99);
exit(0);
}
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
10 Jul 2023 00:00Current
7.5High risk
Vulners AI Score7.5
CVSS 24.3
CVSS 3.17.5
CVSS 35.9
EPSS0.01575