漏洞类别：Amazon Linux
漏洞等级： 
漏洞信息
CVE-2016-2848 bind: assertion failure triggered by a packet with malformed options
A denial of service flaw was found in the way BIND handled packets with malformed options. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS packet.
漏洞危害
Allows unauthorized disclosure of information; allows unauthorized modification; allows disruption of service.
解决方案
Please refer to Amazon advisory ALAS-2016-758 for affected packages and patching details, or update with your package manager.
Patch:
Following are links for downloading patches to fix the vulnerabilities:
ALAS-2016-758: Amazon Linux (bind (9.8.2-0.37.rc1.49.amzn1) on i686)
ALAS-2016-758: Amazon Linux (bind (9.8.2-0.37.rc1.49.amzn1) on x86_64)
ALAS-2016-758: Amazon Linux (bind (9.8.2-0.37.rc1.49.amzn1) on src)
0day
文章评论