Test Kennung:	1.3.6.1.4.1.25623.1.0.853178
Kategorie:	SuSE Local Security Checks
Titel:	openSUSE: Security Advisory for pdns-recursor (openSUSE-SU-2020:0698-1)
Zusammenfassung:	The remote host is missing an update for the 'pdns-recursor'; package(s) announced via the openSUSE-SU-2020:0698-1 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'pdns-recursor' package(s) announced via the openSUSE-SU-2020:0698-1 advisory. Vulnerability Insight: This update for pdns-recursor fixes the following issues: - update to 4.1.16 * fixes an issue where records in the answer section of a NXDOMAIN response lacking an SOA were not properly validated (CVE-2020-12244, boo#1171553) * fixes an issue where invalid hostname on the server can result in disclosure of invalid memory (CVE-2020-10030, boo#1171553) * fixes an issue in the DNS protocol has been found that allows malicious parties to use recursive DNS services to attack third party authoritative name servers (CVE-2020-10995, boo#1171553) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or 'zypper patch'. Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-698=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-698=1 Affected Software/OS: 'pdns-recursor' package(s) on openSUSE Leap 15.1. Solution: Please install the updated package(s). CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-10030 Common Vulnerability Exposure (CVE) ID: CVE-2020-10995 Common Vulnerability Exposure (CVE) ID: CVE-2020-12244
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.