Remote Code Execution

activemq-broker is vulnerable to remote code execution. A regression that prevents JMX re-bind allows an attacker to execute arbitrary code by passing an empty environment map to MIConnectorServer instead of the map that contains the authentication credentials...

CVE-2020-11998: Undefined Security Weakness

A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contains the authentication credentials, it leaves ActiveMQ open to the following attack:...

EulerOS Virtualization for ARM 64 3.0.2.0 : bind (EulerOS-SA-2020-1953)

According to the versions of the bind packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An assertion failure was found in BIND, which checks the validity of messages containing TSIG resource records. This fla...

Solaris 10 (x86) : 119784-46

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Bind/Postinstall script for Bind package. The supported version that is affected is 10. Very difficult to exploit vulnerability requiring logon to Operating System plus additional login/authentication to component o...

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2020-1953)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2020-1916)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Windows Inject Reflective PE Files, Windows x64 Bind TCP Stager

Inject a custom native PE file into the exploited process using a reflective PE loader. The reflective PE loader will execute the pre-mapped PE image starting from the address of entry after performing image base relocation and API address resolution. This module requires a PE file that contains...

Windows Inject Reflective PE Files, Windows x64 IPv6 Bind TCP Stager with UUID Support

Inject a custom native PE file into the exploited process using a reflective PE loader. The reflective PE loader will execute the pre-mapped PE image starting from the address of entry after performing image base relocation and API address resolution. This module requires a PE file that contains...

EulerOS 2.0 SP5 : bind (EulerOS-SA-2020-1916)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows or...

Fedora: Security Advisory for bind-dyndb-ldap (FEDORA-2020-a02b7a0f21)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for bind (FEDORA-2020-a02b7a0f21)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for bind-dyndb-ldap (FEDORA-2020-14c194e5af)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for bind (FEDORA-2020-14c194e5af)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Privilege Escalation

bind is vulnerable to privilege escalation. The vulnerability exists as a user is able to change a specific subset of the zone's content could abuse these unintended additional privileges to update other contents of the zone...

Denial Of Service (DoS)

BIND 9 is vulnerable to denial of service DoS. An attacker that can reach a vulnerable system with a specially crafted query packet can trigger a crash. To be vulnerable, the system must: be running BIND that was built with "--enable-native-pkcs11" be signing one or more zones with an RSA key be...

Denial Of Service (DoS)

BIND is vulnerable to denial of service, An attacker who on the network path for a TSIG-signed request is able to send a truncated response to that request that will result in an assertion failure, causing the server to exit...

Denial Of Service (DoS)

bind is vulnerable to denial of service DoS. The vulnerability exists when a server is configured with both QNAME minimization and 'forward first', and a user who can send queries to it may be able to trigger the condition that will cause the server to crash...

Denial Of Service (DoS)

BIND is vulnerable to denial of service DoS. An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the assertion failure, causing the server to exit...

Fedora 31 : 32:bind / bind-dyndb-ldap / dnsperf (2020-14c194e5af)

Upstream release notes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security,...

GLSA-202008-19 : BIND: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-19 BIND: Multiple vulnerabilities Multiple vulnerabilities have been discovered in BIND. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...