The remote NewStart CGSL host, running version MAIN 6.01, has bind packages installed that are affected by multiple vulnerabilities:

  - With pipelining enabled each incoming query on a TCP     connection requires a similar resource allocation to a     query received via UDP or via TCP without pipelining     enabled. A client using a TCP-pipelined connection to a     server could consume more resources than the server has     been provisioned to handle. When a TCP connection with a     large number of pipelined queries is closed, the load on     the server releasing these multiple resources can cause     it to become unresponsive, even for queries that can be     answered authoritatively or from cache. (This is most     likely to be perceived as an intermittent server     problem). (CVE-2019-6477)

  - A malicious actor who intentionally exploits this lack     of effective limitation on the number of fetches     performed when processing referrals can, through the use     of specially crafted referrals, cause a recursing server     to issue a very large number of fetches in an attempt to     process the referral. This has at least two potential     effects: The performance of the recursing server can     potentially be degraded by the additional work required     to perform these fetches, and The attacker can exploit     this behavior to use the recursing server as a reflector     in a reflection attack with a high amplification factor.
    (CVE-2020-8616)

  - Using a specially-crafted message, an attacker may     potentially cause a BIND server to reach an inconsistent     state if the attacker knows (or successfully guesses)     the name of a TSIG key used by the server. Since BIND,     by default, configures a local session key even on     servers whose configuration does not otherwise make use     of it, almost all current BIND servers are vulnerable.
    In releases of BIND dating from March 2018 and after, an     assertion check in tsig.c detects this inconsistent     state and deliberately exits. Prior to the introduction     of the check the server would continue operating in an     inconsistent state, with potentially harmful results.
    (CVE-2020-8617)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

NewStart CGSL MAIN 6.01 : bind Multiple Vulnerabilities (NS-SA-2020-0031)

high Nessus Plugin ID 138773

Version 1.7