Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:1350-1

Опубликовано: 20 мая 2020
Источник: suse-cvrf

Описание

Security update for bind

This update for bind fixes the following issues:

Security issues fixed:

  • CVE-2020-8616: Fixed the insufficient limit on the number of fetches performed when processing referrals (bsc#1171740).
  • CVE-2020-8617: Fixed a logic error in code which checks TSIG validity (bsc#1171740).

Non-security issue fixed:

  • Fixed an invalid string comparison in the handling of cookie-secrets (bsc#1161168).

Список пакетов

Image SLES12-SP4-Azure-BYOS
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP4-EC2-HVM-BYOS
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP4-GCE-BYOS
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP4-OCI-BYOS
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP4-SAP-Azure
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP4-SAP-Azure-BYOS
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP4-SAP-EC2-HVM
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP4-SAP-EC2-HVM-BYOS
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP4-SAP-GCE
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP4-SAP-GCE-BYOS
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP4-SAP-OCI-BYOS
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP5-Azure-BYOS
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP5-Azure-Basic-On-Demand
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP5-Azure-HPC-BYOS
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP5-Azure-HPC-On-Demand
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP5-Azure-SAP-BYOS
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP5-Azure-SAP-On-Demand
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP5-Azure-Standard-On-Demand
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP5-EC2-BYOS
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP5-EC2-ECS-On-Demand
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP5-EC2-On-Demand
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP5-EC2-SAP-BYOS
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP5-EC2-SAP-On-Demand
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP5-GCE-BYOS
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP5-GCE-On-Demand
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP5-GCE-SAP-BYOS
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP5-GCE-SAP-On-Demand
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP5-OCI-BYOS-BYOS
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP5-OCI-BYOS-SAP-BYOS
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
bind-utils-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
SUSE Linux Enterprise Server 12 SP4
bind-9.11.2-3.17.1
bind-chrootenv-9.11.2-3.17.1
bind-doc-9.11.2-3.17.1
bind-utils-9.11.2-3.17.1
libbind9-160-9.11.2-3.17.1
libdns169-9.11.2-3.17.1
libirs160-9.11.2-3.17.1
libisc166-9.11.2-3.17.1
libisc166-32bit-9.11.2-3.17.1
libisccc160-9.11.2-3.17.1
libisccfg160-9.11.2-3.17.1
liblwres160-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
SUSE Linux Enterprise Server 12 SP5
bind-9.11.2-3.17.1
bind-chrootenv-9.11.2-3.17.1
bind-doc-9.11.2-3.17.1
bind-utils-9.11.2-3.17.1
libbind9-160-9.11.2-3.17.1
libdns169-9.11.2-3.17.1
libirs160-9.11.2-3.17.1
libisc166-9.11.2-3.17.1
libisc166-32bit-9.11.2-3.17.1
libisccc160-9.11.2-3.17.1
libisccfg160-9.11.2-3.17.1
liblwres160-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
bind-9.11.2-3.17.1
bind-chrootenv-9.11.2-3.17.1
bind-doc-9.11.2-3.17.1
bind-utils-9.11.2-3.17.1
libbind9-160-9.11.2-3.17.1
libdns169-9.11.2-3.17.1
libirs160-9.11.2-3.17.1
libisc166-9.11.2-3.17.1
libisc166-32bit-9.11.2-3.17.1
libisccc160-9.11.2-3.17.1
libisccfg160-9.11.2-3.17.1
liblwres160-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
bind-9.11.2-3.17.1
bind-chrootenv-9.11.2-3.17.1
bind-doc-9.11.2-3.17.1
bind-utils-9.11.2-3.17.1
libbind9-160-9.11.2-3.17.1
libdns169-9.11.2-3.17.1
libirs160-9.11.2-3.17.1
libisc166-9.11.2-3.17.1
libisc166-32bit-9.11.2-3.17.1
libisccc160-9.11.2-3.17.1
libisccfg160-9.11.2-3.17.1
liblwres160-9.11.2-3.17.1
python-bind-9.11.2-3.17.1
SUSE Linux Enterprise Software Development Kit 12 SP4
bind-devel-9.11.2-3.17.1
SUSE Linux Enterprise Software Development Kit 12 SP5
bind-devel-9.11.2-3.17.1

Ссылки

Описание

A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafted referrals, cause a recursing server to issue a very large number of fetches in an attempt to process the referral. This has at least two potential effects: The performance of the recursing server can potentially be degraded by the additional work required to perform these fetches, and The attacker can exploit this behavior to use the recursing server as a reflector in a reflection attack with a high amplification factor.

Затронутые продукты
Image SLES12-SP4-Azure-BYOS:bind-utils-9.11.2-3.17.1
Image SLES12-SP4-Azure-BYOS:python-bind-9.11.2-3.17.1
Image SLES12-SP4-EC2-HVM-BYOS:bind-utils-9.11.2-3.17.1
Image SLES12-SP4-EC2-HVM-BYOS:python-bind-9.11.2-3.17.1
Ссылки

Описание

Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration does not otherwise make use of it, almost all current BIND servers are vulnerable. In releases of BIND dating from March 2018 and after, an assertion check in tsig.c detects this inconsistent state and deliberately exits. Prior to the introduction of the check the server would continue operating in an inconsistent state, with potentially harmful results.

Затронутые продукты
Image SLES12-SP4-Azure-BYOS:bind-utils-9.11.2-3.17.1
Image SLES12-SP4-Azure-BYOS:python-bind-9.11.2-3.17.1
Image SLES12-SP4-EC2-HVM-BYOS:bind-utils-9.11.2-3.17.1
Image SLES12-SP4-EC2-HVM-BYOS:python-bind-9.11.2-3.17.1
Ссылки
Уязвимость SUSE-SU-2020:1350-1