Alert GCSA-18018 - Security advisory per ISC BIND e DHCP
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ****************************************************************** Alert ID: GCSA-18018 Data: 2 marzo 2018 Titolo: Security advisory per ISC BIND e DHCP ****************************************************************** :: Descrizione del problema L'Internet Systems Consortium (ISC) ha rilasciato aggiornamenti per risolvere vulnerabilità presenti in ISC Dynamic Host Configuration Protocol (DHCP) e Berkeley Internet Name Domain (BIND). Un attaccante remoto potrebbe sfruttare le vulnerabilità per causare condizioni di denial-of-service. Maggiori informazioni sono disponibili nella segnalazione ufficiale alla sezione "Riferimenti". :: Software interessato DHCP versioni: 4.1.0 - 4.1-ESV-R15, 4.2.0 - 4.2.8, 4.3.0 - 4.3.6, 4.4.0 BIND versioni: 9.10.5-S1 - 9.10.5-S4, 9.10.6-S1, 9.10.6-S2 :: Impatto Denial of Service :: Soluzioni Il vendor ha rilasciato appositi fix per DHCP (4.1-ESV-R15-P1, 4.3.6-P1, 4.4.1). Il vendor ha rilasciato appositi fix per BIND (BIND Supported Preview Edition 9.10.6-S3). :: Riferimenti ISC Security Advisory https://kb.isc.org/article/AA-01562/74/CVE-2018-5734 https://kb.isc.org/article/AA-01565/75/CVE-2018-5732 Security Tracker https://securitytracker.com/id/1040438 https://securitytracker.com/id/1040437 https://securitytracker.com/id/1040436 Security Focus https://www.securityfocus.com/bid/103189 https://www.securityfocus.com/bid/103188 https://www.securityfocus.com/bid/103187 Mitre's CVE ID http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5733 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5732 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5734 GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEARECAAYFAlqZMfYACgkQwZxMk2USYEKieACbBwg2SKh1J8IREiVvVmRIXzsW pQ0AoL4RHGaQD2OLy+iHzepKoH/awJig =hiOu -----END PGP SIGNATURE-----