Executive Summary
| Informations | |||
|---|---|---|---|
| Name | MDVSA-2015:054 | First vendor Publication | 2015-03-04 |
| Vendor | Mandriva | Last vendor Modification | 2015-03-04 |
| Severity (Vendor) | N/A | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:H/Au:N/C:N/I:N/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 5.4 | Attack Range | Network |
| Cvss Impact Score | 6.9 | Attack Complexity | High |
| Cvss Expoit Score | 4.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Updated bind packages fix security vulnerability: Jan-Piet Mens discovered that the BIND DNS server would crash when processing an invalid DNSSEC key rollover, either due to an error on the zone operator's part, or due to interference with network traffic by an attacker. This issue affects configurations with the directives "dnssec-lookaside auto\;" (as enabled in the Mageia default configuration) or "dnssec-validation auto\;" (CVE-2015-1349). |
Original Source
| Url : http://www.mandriva.com/security/advisories?name=MDVSA-2015:054 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-399 | Resource Management Errors |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:29309 | |||
| Oval ID: | oval:org.mitre.oval:def:29309 | ||
| Title: | HP-UX Running BIND, Remote Denial of Service (DoS) | ||
| Description: | named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit, or daemon crash) by triggering an incorrect trust-anchor management scenario in which no key is ready for use. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2015-1349 | Version: | 3 |
| Platform(s): | HP-UX 11 | Product(s): | |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2017-04-21 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2017-0066.nasl - Type : ACT_GATHER_INFO |
| 2015-10-19 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201510-01.nasl - Type : ACT_GATHER_INFO |
| 2015-09-22 | Name : The remote host is missing a security update for OS X Server. File : macosx_server_5_0_3.nasl - Type : ACT_GATHER_INFO |
| 2015-07-31 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2015-0105.nasl - Type : ACT_GATHER_INFO |
| 2015-07-17 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2015-494.nasl - Type : ACT_GATHER_INFO |
| 2015-07-09 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2015-1205-1.nasl - Type : ACT_GATHER_INFO |
| 2015-07-09 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2015-1204-1.nasl - Type : ACT_GATHER_INFO |
| 2015-04-22 | Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2015-111-01.nasl - Type : ACT_GATHER_INFO |
| 2015-04-03 | Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL16356.nasl - Type : ACT_GATHER_INFO |
| 2015-03-30 | Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2015-165.nasl - Type : ACT_GATHER_INFO |
| 2015-03-26 | Name : The remote Debian host is missing a security update. File : debian_DLA-163.nasl - Type : ACT_GATHER_INFO |
| 2015-03-19 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2015-0033.nasl - Type : ACT_GATHER_INFO |
| 2015-03-19 | Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2015-054.nasl - Type : ACT_GATHER_INFO |
| 2015-03-17 | Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2015-490.nasl - Type : ACT_GATHER_INFO |
| 2015-03-12 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20150311_bind_on_SL6_x.nasl - Type : ACT_GATHER_INFO |
| 2015-03-12 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2015-0672.nasl - Type : ACT_GATHER_INFO |
| 2015-03-11 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2015-0672.nasl - Type : ACT_GATHER_INFO |
| 2015-03-11 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2015-0672.nasl - Type : ACT_GATHER_INFO |
| 2015-03-06 | Name : The remote Fedora host is missing a security update. File : fedora_2015-2548.nasl - Type : ACT_GATHER_INFO |
| 2015-03-06 | Name : The remote Fedora host is missing a security update. File : fedora_2015-2543.nasl - Type : ACT_GATHER_INFO |
| 2015-02-24 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_58033a95bba811e488aed050992ecde8.nasl - Type : ACT_GATHER_INFO |
| 2015-02-24 | Name : The remote name server is affected by multiple vulnerabilities. File : bind9_997_rc2.nasl - Type : ACT_GATHER_INFO |
| 2015-02-24 | Name : The remote name server is affected by a denial of service vulnerability. File : bind9_996_p2.nasl - Type : ACT_GATHER_INFO |
| 2015-02-24 | Name : The remote name server is affected by a denial of service vulnerability. File : bind9_996_S3_dnsco.nasl - Type : ACT_GATHER_INFO |
| 2015-02-24 | Name : The remote name server is affected by multiple vulnerabilities. File : bind9_9102_rc2.nasl - Type : ACT_GATHER_INFO |
| 2015-02-24 | Name : The remote name server is affected by a denial of service vulnerability. File : bind9_9101_p2.nasl - Type : ACT_GATHER_INFO |
| 2015-02-19 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-3162.nasl - Type : ACT_GATHER_INFO |
| 2015-02-19 | Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-2503-1.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2015-03-20 13:29:04 |
|
| 2015-03-04 13:22:56 |
|
