ID de Prueba:	1.3.6.1.4.1.25623.1.0.105160
Categoría:	F5 Local Security Checks
Título:	F5 BIG-IP - Unbound vulnerability CVE-2014-8602
Resumen:	F5 BIG-IP is prone to a remote denial-of-service vulnerability.
Descripción:	Summary: F5 BIG-IP is prone to a remote denial-of-service vulnerability. Vulnerability Insight: Iterator.c in NLnet Labs Unbound before 1.5.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a large or infinite number of referrals. Vulnerability Impact: An attacker with a properly configured authority server could cause a denial-of-service using a crafted DNS recursive query, designed to follow an endless series of delegations. Solution: See the referenced vendor advisory for a solution. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Referencia Cruzada:	BugTraq ID: 71589 Common Vulnerability Exposure (CVE) ID: CVE-2014-8602 http://www.securityfocus.com/bid/71589 CERT/CC vulnerability note: VU#264212 http://www.kb.cert.org/vuls/id/264212 Debian Security Information: DSA-3097 (Google Search) http://www.debian.org/security/2014/dsa-3097 http://cert.ssi.gouv.fr/site/CERTFR-2014-AVI-512/index.html http://unbound.net/downloads/patch_cve_2014_8602.diff http://www.ubuntu.com/usn/USN-2484-1
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.