F5 Networks BIG-IP

ソフト名：F5 Networks BIG-IP 10.2.1 HF2/10.2.1 HF3/10.2.2 LTM/GTM/ASM/Link Controller/WebAccelerator/PSM/WOM/APM/Edge Gateway (Internet Software Consortium ISC BIND 9.6.3/9.6-ESV-R4/9.6-ESV-R4-P1/9.6-ESV-R5b1/9.7.0/9.7.0-P1/9.7.0-P2/9.7.1/9.7.1-P1/9.7.1-P2/9.7.2/9.7.2-P1/9.7.2-P2/9.7.2-P3/9.7.3/9.7.3-P1/9.7.3-P2/9.7.4b1/9.8.x)

回避策：10.2.2 HF1の適用にて対応

脆弱性：DoS攻撃, アップデート要求処理エラー, プロセスの終了

ソース：

http://www.f5.com/products/big-ip/

http://support.f5.com/kb/en-us/solutions/public/12000/900/sol12986.html

http://secunia.com/advisories/45082/

http://secunia.com/advisories/45868/

http://dvw-j.blogspot.com/2011/07/internet-software-consortium-isc-bind.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2464

CVE：CVE-2011-2464

危険性：Medium Risk

Slackware Linux

ソフト名：Slackware Linux 8.x/9.0/9.1/10.0/11.0 (Internet Software Consortium ISC BIND 9.x)

回避策：SSA:2011-224-01にて対応

脆弱性：DoS攻撃, アサーションエラー, アップデート要求処理エラー, プロセスの終了

ソース：

http://www.slackware.com/

http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.662839

http://secunia.com/advisories/44719/

http://secunia.com/advisories/45082/

http://secunia.com/advisories/45623/

http://dvw-j.blogspot.com/2011/05/internet-software-consortium-isc-bind_31.html

http://dvw-j.blogspot.com/2011/07/internet-software-consortium-isc-bind.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1910

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2464

CVE：CVE-2011-1910, CVE-2011-2464

危険性：Medium Risk

NetBSD

ソフト名：NetBSD 4.0 (Internet Software Consortium ISC BIND 9.6.x/9.7.x/9.8.x)

回避策：あり

脆弱性：DoS攻撃, アップデート要求処理エラー, プロセスの終了

ソース：

http://www.netbsd.org/releases/formal-4/NetBSD-4.0.html

http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-006.txt.asc

http://secunia.com/advisories/45185/

http://secunia.com/advisories/45381/

http://dvw-j.blogspot.com/2011/07/internet-software-consortium-isc-bind.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0414

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1907

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1910

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2464

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2465

CVE：CVE-2011-0414, CVE-2011-1907, CVE-2011-1910, CVE-2011-2464, CVE-2011-2465

危険性：Medium Risk

Sun Solaris, Oracle Solaris, Red Hat Fedora

ソフト名：Sun Solaris 8/9/10, Oracle Solaris 11 Express, Red Hat Fedora 14 (Internet Software Consortium ISC BIND 9.6.x/9.7.x/9.8.x)

回避策：あり, FEDORA-2011-9127にて対応

脆弱性：DoS攻撃, アップデート要求処理エラー, プロセスの終了

ソース：

http://www.oracle.com/us/sun/index.htm

http://fedoraproject.org/

http://www.oracle.com/us/products/servers-storage/solaris/solaris-11-express-185123.html

http://blogs.oracle.com/sunsecurity/entry/cve_2011_2464_remote_denial

http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062846.html

http://secunia.com/advisories/45082/

http://secunia.com/advisories/45410/

http://secunia.com/advisories/45412/

http://dvw-j.blogspot.com/2011/07/internet-software-consortium-isc-bind.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2464

CVE：CVE-2011-2464

危険性：Medium Risk

Red Hat Enterprise Linux, Novell openSUSE, Novell SUSE Linux Enterprise Server

ソフト名：Red Hat Enterprise Linux 5 (Server)/Desktop Workstation 5/Desktop 6/HPC Node 6/Server 6/Workstation 6, Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server (SLES) 10/11 (Internet Software Consortium ISC BIND 9.x)

回避策：RHSA-2011:0926-01にて対応, SUSE-SA:2011:029にて対応

脆弱性：DoS攻撃, アップデート要求処理エラー, プロセスの終了

ソース：http://www.redhat.com/rhel/

http://www.redhat.com/rhel/server/

http://www.redhat.com/rhel/desktop/

http://www.opensuse.org/en/

http://www.novell.com/products/server/

http://www.novell.com/promo/home/sle11.html

https://rhn.redhat.com/errata/RHSA-2011-0926.html

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00002.html

http://secunia.com/advisories/45082/

http://secunia.com/advisories/45177/

http://secunia.com/advisories/45223/

http://dvw-j.blogspot.com/2011/07/internet-software-consortium-isc-bind.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2464

CVE：CVE-2011-2464

危険性：Medium Risk

Canonical Ltd. Ubuntu Linux, Debian GNU/Linux

ソフト名：Canonical Ltd. Ubuntu Linux 8.04/10.04/10.10, Debian GNU/Linux 5.0/6.0 (Internet Software Consortium ISC BIND 9.x)

回避策：USN-1163-1にて対応, DSA-2272-1にて対応

脆弱性：DoS攻撃, アップデート要求処理エラー, プロセスの終了

ソース：http://www.ubuntu.com/

http://www.debian.org/

https://lists.ubuntu.com/archives/ubuntu-security-announce/2011-July/001365.html

http://lists.debian.org/debian-security-announce/2011/msg00144.html

http://secunia.com/advisories/45082/

http://secunia.com/advisories/45089/

http://secunia.com/advisories/45143/

http://dvw-j.blogspot.com/2011/07/internet-software-consortium-isc-bind.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2464

CVE：CVE-2011-2464

危険性：Medium Risk

Internet Software Consortium ISC BIND

ソフト名：Internet Software Consortium ISC BIND 9.6.3/9.6-ESV-R4/9.6-ESV-R4-P1/9.6-ESV-R5b1/9.7.0/9.7.0-P1/9.7.0-P2/9.7.1/9.7.1-P1/9.7.1-P2/9.7.2/9.7.2-P1/9.7.2-P2/9.7.2-P3/9.7.3/9.7.3-P1/9.7.3-P2/9.7.4b1/9.8.x

回避策：9.6-ESV-R4-P3, 9.7.3-P3, 9.8.0-P4へのアップデートにて対応

脆弱性：DoS攻撃, アップデート要求処理エラー, プロセスの終了

ソース：https://www.isc.org/software/bind

http://www.isc.org/software/bind/advisories/cve-2011-2464

http://www.isc.org/software/bind/advisories/cve-2011-2465

http://secunia.com/advisories/45082/

http://secunia.com/advisories/45185/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2464

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2465

CVE：CVE-2011-2464, CVE-2011-2465

危険性：Medium Risk