ID de Prueba:	1.3.6.1.4.1.25623.1.1.2.2019.1081
Categoría:	Huawei EulerOS Local Security Checks
Título:	Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2019-1081)
Resumen:	The remote host is missing an update for the Huawei EulerOS 'bind' package(s) announced via the EulerOS-SA-2019-1081 advisory.
Descripción:	Summary: The remote host is missing an update for the Huawei EulerOS 'bind' package(s) announced via the EulerOS-SA-2019-1081 advisory. Vulnerability Insight: 'deny-answer-aliases' is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Affects BIND 9.7.0->9.8.8, 9.9.0->9.9.13, 9.10.0->9.10.8, 9.11.0->9.11.4, 9.12.0->9.12.2, 9.13.0->9.13.2.(CVE-2018-5740) Affected Software/OS: 'bind' package(s) on Huawei EulerOS Virtualization 2.5.2. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-5740 BugTraq ID: 105055 http://www.securityfocus.com/bid/105055 https://security.gentoo.org/glsa/201903-13 https://lists.debian.org/debian-lts-announce/2018/08/msg00033.html RedHat Security Advisories: RHSA-2018:2570 https://access.redhat.com/errata/RHSA-2018:2570 RedHat Security Advisories: RHSA-2018:2571 https://access.redhat.com/errata/RHSA-2018:2571 http://www.securitytracker.com/id/1041436 SuSE Security Announcement: openSUSE-SU-2019:1532 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00026.html SuSE Security Announcement: openSUSE-SU-2019:1533 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00027.html https://usn.ubuntu.com/3769-1/ https://usn.ubuntu.com/3769-2/
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.