F5 Networks BIG-IP : Multiple DNS vulnerabilities (SOL6365)

high Nessus Plugin ID 88440

Synopsis

The remote device is missing a vendor-supplied security patch.

Description

This security advisory describes several potential vulnerabilities in Internet Systems Consortium's Berkeley Internet Name Daemon (BIND).
BIND is provided on some F5 Networks products. The potential vulnerabilities include: execution of arbitrary code, denial of service, and other unpredictable behavior.

Solution

Upgrade to one of the non-vulnerable versions listed in the F5 Solution SOL6365.

See Also

https://support.f5.com/csp/article/K6365

Plugin Details

Severity: High

ID: 88440

File Name: f5_bigip_SOL6365.nasl

Version: 1.8

Type: local

Published: 1/28/2016

Updated: 1/11/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/a:f5:big-ip_application_security_manager, cpe:/a:f5:big-ip_global_traffic_manager, cpe:/a:f5:big-ip_link_controller, cpe:/a:f5:big-ip_local_traffic_manager, cpe:/a:f5:big-ip_webaccelerator, cpe:/h:f5:big-ip

Required KB Items: Host/local_checks_enabled, Host/BIG-IP/hotfix, Host/BIG-IP/modules, Host/BIG-IP/version

Patch Publication Date: 5/16/2007

Reference Information

CERT: 955777