Amazon Linux AMI : bind Remote Attack Vulnerability (ALAS-2013-158)

This script is Copyright (C) 2013 Tenable Network Security, Inc.


Synopsis :

The remote Amazon Linux AMI host is missing a security update.

Description :

A flaw was found in the way the dhcpd daemon handled the expiration
time of IPv6 leases. If dhcpd's configuration was changed to reduce
the default IPv6 lease time, lease renewal requests for previously
assigned leases could cause dhcpd to crash. (CVE-2012-3955)

See also :

http://www.nessus.org/u?274dbbc7

Solution :

Run 'yum update dhcp' to update your system.

Risk factor :

High / CVSS Base Score : 7.1
(CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C)

Family: Amazon Linux Local Security Checks

Nessus Plugin ID: 69717 ()

Bugtraq ID:

CVE ID: CVE-2012-3955