Slackware 14.0 / 14.1 / 14.2 / current : bind (SSA:2019-116-01)

New bind packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-116-01. The text itself is copyright C Slackware Linux...

[slackware-security] bind

New bind packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/bind-9.11.6P1-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: The TCP client quota set using the...

Ubuntu 16.04 LTS / 18.04 LTS : Bind vulnerability (USN-3956-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3956-1 advisory. It was discovered that Bind incorrectly handled limiting the number of simultaneous TCP clients. A remote attacker could possibly use this issue to...

USN-3956-1: Bind vulnerability

It was discovered that Bind incorrectly handled limiting the number of simultaneous TCP clients. A remote attacker could possibly use this issue to cause Bind to consume resources, leading to a denial of service...

USN-3956-1 bind9 vulnerability

It was discovered that Bind incorrectly handled limiting the number of simultaneous TCP clients. A remote attacker could possibly use this issue to cause Bind to consume resources, leading to a denial of service...

Exploit for Reachable Assertion in Isc Bind

CVE-2019-6467 BIND nxdomain-redirect For educational purposes...

Lavavo CD Ripper 4.20 Local SEH Exploit

Exploit for windows platform in category local exploits Exploit Title: Lavavo CD Ripper 4.20 Local Seh Exploit Date: 25.04.2019 Vendor Homepage:https://www.lavavosoftware.com Software Link: https://lavavo-cd-ripper.jaleco.com/download Exploit Author: Achilles Tested Version: 4.20 Tested on: Windo...

Security fix for the ALT Linux 9 package bind version 9.11.6.P1-alt1

April 25, 2019 Stanislav Levin 9.11.6.P1-alt1 - 9.11.6 - 9.11.6.P1 fixes: CVE-2018-5743...

Security fix for the ALT Linux 10 package bind version 9.11.6.P1-alt1

April 25, 2019 Stanislav Levin 9.11.6.P1-alt1 - 9.11.6 - 9.11.6.P1 fixes: CVE-2018-5743...

Lavavo CD Ripper 4.20 - License Activation Name Buffer Overflow (SEH)

Lavavo CD Ripper 4.20 - License Activation Name Buffer Overflow SEH Exploit Title: Lavavo CD Ripper 4.20 Local Seh Exploit Date: 25.04.2019 Vendor Homepage:https://www.lavavosoftware.com Software Link: https://lavavo-cd-ripper.jaleco.com/download Exploit Author: Achilles Tested Version: 4.20 Test...

ISC Releases BIND Security Updates

The Internet Systems Consortium ISC has released updates that address vulnerabilities in versions of ISC Berkeley Internet Name Domain BIND. A remote attacker could exploit these vulnerabilities to cause a denial-of-service condition. The Cybersecurity and Infrastructure Security Agency CISA...

BIND DoS

The vulnerability of the deny-answer-alias function in the open-source BIND DNS server implementation is related to a validation error that occurs in name.c when this function is used. Exploiting this vulnerability allows an attacker to cause a service failure...

Lavavo CD Ripper 4.20 - 'License Activation Name' Buffer Overflow (SEH)

Exploit Title: Lavavo CD Ripper 4.20 Local Seh Exploit Date: 25.04.2019 Vendor Homepage:https://www.lavavosoftware.com Software Link: https://lavavo-cd-ripper.jaleco.com/download Exploit Author: Achilles Tested Version: 4.20 Tested on: Windows XP SP3 EN Windows 7 Sp1 x64 1.- Run python code :...

CVE-2018-5743

By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which was intended to limit the number of...

PT-2019-4818

Name of the Vulnerable Software and Affected Versions BIND versions 9.9.0 through 9.10.8-P1 BIND versions 9.11.0 through 9.11.6 BIND versions 9.12.0 through 9.12.4 BIND version 9.14.0 BIND 9 Supported Preview Edition versions 9.9.3-S1 through 9.11.5-S3 BIND 9 Supported Preview Edition version...

CVE-2019-6467

A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most likely scenario where this might occur is if the server, in addition to performing NXDOMAI...

PT-2019-5505

Name of the Vulnerable Software and Affected Versions BIND versions 9.12.0 through 9.12.4 BIND version 9.14.0 BIND 9.13 development branch Description A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c. This issue is most likely to occur when the server...

PT-2019-5506

Name of the Vulnerable Software and Affected Versions BIND Supported Preview Edition versions 9.10.5-S1 through 9.11.5-S5 Description The issue is related to the nxdomain-redirect feature in the BIND DNS server, specifically when EDNS Client Subnet ECS features are supported. It can lead to an...

CVE-2019-6468

In BIND Supported Preview Edition, an error in the nxdomain-redirect feature can occur in versions which support EDNS Client Subnet ECS features. In those versions which have ECS support, enabling nxdomain-redirect is likely to lead to BIND exiting due to assertion failure. Versions affected: BIN...

Amazon Linux 2 : bind (ALAS-2019-1187)

To provide fine-grained controls over the ability to use Dynamic DNS DDNS to update records in a zone, BIND 9 provides a feature called update-policy. Various rules can be configured to limit the types of updates that can be performed by a client, depending on the key used when sending the update...