SB2013032704 - Slackware Linux update for dhcp

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2013032704

SB2013032704 - Slackware Linux update for dhcp

Published: March 27, 2013 Updated: May 6, 2017

Security Bulletin ID SB2013032704
Severity
Medium
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Buffer overflow (CVE-ID: CVE-2013-2266)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.


2) Buffer overflow (CVE-ID: CVE-2013-2266)

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.


Remediation

Install update from vendor's website.

References