The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4500 advisory.

    The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols.
    BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing     with DNS); and tools for verifying that the DNS server is operating correctly.

    The following packages have been upgraded to a later upstream version: bind (9.11.20). (BZ#1818785)

    Security Fix(es):

    * bind: asterisk character in an empty non-terminal can cause an assertion failure in rbtdb.c     (CVE-2020-8619)

    * bind: truncated TSIG response can lead to an assertion failure (CVE-2020-8622)

    * bind: remotely triggerable assertion failure in pk11.c (CVE-2020-8623)

    * bind: incorrect enforcement of update-policy rules of type subdomain (CVE-2020-8624)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4500 advisory.

    - Fix tsig-request verify (CVE-2020-8622)
    - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
    - Correct update-policy type subdomain to match documentation (CVE-2020-8624)
    - Update to 9.11.19 (CVE-2020-8616, CVE-2020-8617)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the version of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND     9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND     Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1:
    Unless a nameserver is providing authoritative service     for one or more zones and at least one zone contains an     empty non-terminal entry containing an asterisk ('*')     character, this defect cannot be encountered. A     would-be attacker who is allowed to change zone content     could theoretically introduce such a record in order to     exploit this condition to cause denial of service,     though we consider the use of this vector unlikely     because any such attack would require a significant     privilege level and be easily traceable.(CVE-2020-8619)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4399-1 advisory.

    It was discovered that Bind incorrectly handled large responses during zone transfers. A remote attacker     could possibly use this issue to cause Bind to crash, resulting in a denial of service. (CVE-2020-8618)

    It was discovered that Bind incorrectly handled certain asterisk characters in zone files. A remote     attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service.
    (CVE-2020-8619)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

New bind packages are available for Slackware 14.0, 14.1, 14.2, and
-current to fix a security issue.

Update to last release, including security fix. Upstream [Release notes](https://downloads.isc.org/isc/bind9/9.11.20/doc/arm/Bv9ARM.html )

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The asterisk character ('*') is allowed in DNS zone files, where it is most commonly present as a wildcard at a terminal node of the Domain Name System graph. However, the RFCs do not require and BIND does not enforce that an asterisk character be present only at a terminal node.

A problem can occur when an asterisk is present in an empty non-terminal location within the DNS graph. If such a node exists, after a series of queries, named can reach an inconsistent state that results in the failure of an assertion check in rbtdb.c, followed by the program exiting due to the assertion failure. (CVE-2020-8619)

Impact

You encounter this defect when you have both of the following conditions :

A nameserver provides authoritative service for one or more zones.

At least one zone contains an empty non-terminal entry containing an asterisk character.

A would-be attacker who is allowed to change zone content could, theoretically, introduce such a record in order to exploit this condition to cause denial-of-service (DoS);however, the use of this vector is unlikely because any such attack requires a significant privilege-level and iseasily traceable.

BIND versions from 9.11.14 through 9.11.19 are impacted.

Several vulnerabilities were discovered in BIND, a DNS server implementation.

  - CVE-2020-8619     It was discovered that an asterisk character in an empty     non terminal can cause an assertion failure, resulting     in denial of service.

  - CVE-2020-8622     Dave Feldman, Jeff Warren, and Joel Cunningham reported     that a truncated TSIG response can lead to an assertion     failure, resulting in denial of service.

  - CVE-2020-8623     Lyu Chiy reported that a flaw in the native PKCS#11 code     can lead to a remotely triggerable assertion failure,     resulting in denial of service.

  - CVE-2020-8624     Joop Boonen reported that update-policy rules of type     'subdomain' are enforced incorrectly, allowing updates     to all parts of the zone along with the intended     subdomain.

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in bind when an asterisk character is     present in an empty non-terminal location within the     DNS graph. This flaw could trigger an assertion     failure, causing bind to crash. The highest threat from     this vulnerability is to system     availability.(CVE-2020-8619)

  - BIND servers are vulnerable if they are running an     affected version and are configured to use GSS-TSIG     features. In a configuration which uses BIND's default     settings the vulnerable code path is not exposed, but a     server can be rendered vulnerable by explicitly setting     valid values for the tkey-gssapi-keytab or     tkey-gssapi-credentialconfiguration options. Although     the default configuration is not vulnerable, GSS-TSIG     is frequently used in networks where BIND is integrated     with Samba, as well as in mixed-server environments     that combine BIND servers with Active Directory domain     controllers. The most likely outcome of a successful     exploitation of the vulnerability is a crash of the     named process. However, remote code execution, while     unproven, is theoretically possible. Affects: BIND     9.5.0 -> 9.11.27, 9.12.0 -> 9.16.11, and versions BIND     9.11.3-S1 -> 9.11.27-S1 and 9.16.8-S1 -> 9.16.11-S1 of     BIND Supported Preview Edition. Also release versions     9.17.0 -> 9.17.1 of the BIND 9.17 development     branch(CVE-2020-8625)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
142448	RHEL 8 : bind (RHSA-2020:4500)	Nessus	Red Hat Local Security Checks	2020/11/4	2024/11/7	medium
142804	Oracle Linux 8 : bind (ELSA-2020-4500)	Nessus	Oracle Linux Local Security Checks	2020/11/12	2024/11/1	medium
146237	EulerOS 2.0 SP9 : bind (EulerOS-SA-2021-1261)	Nessus	Huawei Local Security Checks	2021/2/5	2024/1/23	medium
137625	Ubuntu 20.04 LTS : Bind vulnerabilities (USN-4399-1)	Nessus	Ubuntu Local Security Checks	2020/6/18	2024/8/27	medium
137699	Slackware 14.0 / 14.1 / 14.2 / current : bind (SSA:2020-170-01)	Nessus	Slackware Local Security Checks	2020/6/22	2020/8/28	medium
137765	Fedora 32 : 32:bind (2020-54a91444ff)	Nessus	Fedora Local Security Checks	2020/6/24	2020/8/28	medium
137865	Fedora 31 : 32:bind (2020-5f8da4b260)	Nessus	Fedora Local Security Checks	2020/6/29	2020/8/28	medium
139704	F5 Networks BIG-IP : BIND vulnerability (K19807532)	Nessus	F5 Networks Local Security Checks	2020/8/20	2026/10/21	medium
139930	Debian DSA-4752-1 : bind9 - security update	Nessus	Debian Local Security Checks	2020/8/28	2021/6/3	medium
148575	EulerOS Virtualization 2.9.0 : bind (EulerOS-SA-2021-1739)	Nessus	Huawei Local Security Checks	2021/4/15	2024/1/4	high

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

medium

medium

medium

high