Lucene search
AmazonALAS-2014-287HistoryFeb 03, 2014 - 3:28 p.m.
Medium: bind
2014-02-0315:28:00
alas.aws.amazon.com
29
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:N/I:N/A:P
EPSS
0.637
Percentile
97.9%
Issue Overview:
A denial of service flaw was found in the way BIND handled queries for NSEC3-signed zones. A remote attacker could use this flaw against an authoritative name server that served NCES3-signed zones by sending a specially crafted query, which, when processed, would cause named to crash. (CVE-2014-0591)
Affected Packages:
bind
Issue Correction:
Run yum update bind to update your system.
New Packages:
i686:
bind-sdb-9.8.2-0.23.rc1.32.amzn1.i686
bind-utils-9.8.2-0.23.rc1.32.amzn1.i686
bind-devel-9.8.2-0.23.rc1.32.amzn1.i686
bind-libs-9.8.2-0.23.rc1.32.amzn1.i686
bind-chroot-9.8.2-0.23.rc1.32.amzn1.i686
bind-debuginfo-9.8.2-0.23.rc1.32.amzn1.i686
bind-9.8.2-0.23.rc1.32.amzn1.i686
src:
bind-9.8.2-0.23.rc1.32.amzn1.src
x86_64:
bind-devel-9.8.2-0.23.rc1.32.amzn1.x86_64
bind-9.8.2-0.23.rc1.32.amzn1.x86_64
bind-debuginfo-9.8.2-0.23.rc1.32.amzn1.x86_64
bind-utils-9.8.2-0.23.rc1.32.amzn1.x86_64
bind-sdb-9.8.2-0.23.rc1.32.amzn1.x86_64
bind-libs-9.8.2-0.23.rc1.32.amzn1.x86_64
bind-chroot-9.8.2-0.23.rc1.32.amzn1.x86_64
Additional References
Red Hat: CVE-2014-0591
Mitre: CVE-2014-0591
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Amazon Linux | 1 | i686 | bind-sdb | < 9.8.2-0.23.rc1.32.amzn1 | bind-sdb-9.8.2-0.23.rc1.32.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | bind-utils | < 9.8.2-0.23.rc1.32.amzn1 | bind-utils-9.8.2-0.23.rc1.32.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | bind-devel | < 9.8.2-0.23.rc1.32.amzn1 | bind-devel-9.8.2-0.23.rc1.32.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | bind-libs | < 9.8.2-0.23.rc1.32.amzn1 | bind-libs-9.8.2-0.23.rc1.32.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | bind-chroot | < 9.8.2-0.23.rc1.32.amzn1 | bind-chroot-9.8.2-0.23.rc1.32.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | bind-debuginfo | < 9.8.2-0.23.rc1.32.amzn1 | bind-debuginfo-9.8.2-0.23.rc1.32.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | bind | < 9.8.2-0.23.rc1.32.amzn1 | bind-9.8.2-0.23.rc1.32.amzn1.i686.rpm |
| Amazon Linux | 1 | x86_64 | bind-devel | < 9.8.2-0.23.rc1.32.amzn1 | bind-devel-9.8.2-0.23.rc1.32.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | bind | < 9.8.2-0.23.rc1.32.amzn1 | bind-9.8.2-0.23.rc1.32.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | bind-debuginfo | < 9.8.2-0.23.rc1.32.amzn1 | bind-debuginfo-9.8.2-0.23.rc1.32.amzn1.x86_64.rpm |
Related
openvas
openvas
Fedora Update for bind FEDORA-2014-0811
2014-02-03 00:00:00
Fedora Update for bind FEDORA-2014-0811
2014-02-03 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-287)
2015-09-08 00:00:00
ubuntu
ubuntu
Bind vulnerability
2014-01-13 00:00:00
centos
centos
bind security update
2014-01-20 17:58:43
bind97 security update
2014-09-30 11:21:28
nessus
nessus
SuSE 11.2 / 11.3 Security Update : bind (SAT Patch Numbers 8834 / 8835)
2014-02-01 00:00:00
CentOS 6 : bind (CESA-2014:0043)
2014-01-21 00:00:00
Amazon Linux AMI : bind (ALAS-2014-287)
2014-02-05 00:00:00
freebsd
freebsd
bind -- denial of service vulnerability
2014-01-08 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: bind-9.9.4-11.P2.fc20
2014-01-18 04:24:44
[SECURITY] Fedora 19 Update: bind-9.9.3-14.P2.fc19
2014-01-18 04:21:45
[SECURITY] Fedora 20 Update: bind-9.9.4-17.P2.fc20
2014-12-18 06:10:51
cvelist
cvelist
CVE-2014-0591
2014-01-14 02:00:00
debiancve
debiancve
CVE-2014-0591
2014-01-14 04:29:56
f5
f5
K15133 : BIND vulnerability CVE-2014-0591
2014-04-03 00:00:00
SOL15133 - BIND vulnerability CVE-2014-0591
2014-04-03 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:55:26
checkpoint_advisories
checkpoint_advisories
redhat
redhat
(RHSA-2014:1244) Moderate: bind97 security and bug fix update
2014-09-16 00:00:00
(RHSA-2014:0043) Moderate: bind security update
2014-01-20 00:00:00
debian
debian
[SECURITY] [DLA 48-1] bind9 security update
2014-09-05 19:30:04
[SECURITY] [DSA 3023-1] bind9 security update
2014-09-11 20:39:20
[SECURITY] [DSA 3023-1] bind9 security update
2014-09-11 20:39:20
prion
prion
Design/Logic Flaw
2014-01-14 04:29:00
osv
osv
bind9 - security update
2014-09-11 00:00:00
bind9 - security update
2014-09-05 00:00:00
slackware
slackware
bind
2014-01-28 14:58:17
[slackware-security] bind
2014-06-24 23:46:33
mageia
mageia
Updated bind package fixes security vulnerability
2014-01-17 04:39:03
securityvulns
securityvulns
ISC bind DoS
2014-01-14 00:00:00
[USN-2081-1] Bind vulnerability
2014-01-14 00:00:00
APPLE-SA-2014-10-16-3 OS X Server v4.0
2014-10-18 00:00:00
nvd
nvd
CVE-2014-0591
2014-01-14 04:29:56
cve
cve
CVE-2014-0591
2014-01-14 04:29:56
ubuntucve
ubuntucve
CVE-2014-0591
2014-01-13 00:00:00
seebug
seebug
ISC BIND NSEC3签名域查询处理拒绝服务漏洞
2014-01-16 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:04.bind
2014-01-14 00:00:00
suse
suse
Security update for bind (important)
2015-03-11 20:04:56
oraclelinux
oraclelinux
bind97 security and bug fix update
2014-09-17 00:00:00
bind security update
2014-01-20 00:00:00
gentoo
gentoo
BIND: Denial of service
2014-01-29 00:00:00
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:N/I:N/A:P
EPSS
0.637
Percentile
97.9%
Related for ALAS-2014-287