SUSE SLES11 Security Update : bind (SUSE-SU-2017:1000-1)

This update for bind fixes the following security issues: CVE-2017-3137 bsc1033467: Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could have been exploited to cause a denial of service of a bind server performing...

FreeBSD : BIND -- multiple vulnerabilities (c6861494-1ffb-11e7-934d-d05099c0ae8c)

ISC reports : A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other...

Important: Red Hat Security Advisory: 389-ds-base security and bug fix update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

389-ds-base: Remote crash via crafted LDAP messages

An invalid pointer dereference flaw was found in the way 389-ds-base handled LDAP bind requests. A remote unauthenticated attacker could use this flaw to make ns-slapd crash via a specially crafted LDAP bind request, resulting in denial of service...

PT-2017-15679

Name of the Vulnerable Software and Affected Versions BIND versions 9.8.0 through 9.8.8-P1 BIND versions 9.9.0 through 9.9.9-P6 BIND versions 9.9.10b1 through 9.9.10rc1 BIND versions 9.10.0 through 9.10.4-P6 BIND versions 9.10.5b1 through 9.10.5rc1 BIND versions 9.11.0 through 9.11.0-P3 BIND...

Security fix for the ALT Linux 8 package bind version 9.10.4.P8-alt1

April 12, 2017 Dmitry V. Levin 9.10.4.P8-alt1 - 9.10.4-P6 - 9.10.4-P8 fixes: CVE-2017-3136, CVE-2017-3137, CVE-2017-3138. - bind.service: pass $CHROOT to named-checkconf closes: 33239. - bind.init: check named configuration on startup...

UBUNTU-CVE-2017-3137

Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurred in an unusual order. Affects BIND...

CVE-2017-3136

A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were...

PT-2017-15681

Name of the Vulnerable Software and Affected Versions BIND 9.9.9 through 9.9.9-P7 BIND 9.9.10b1 through 9.9.10rc2 BIND 9.10.4 through 9.10.4-P7 BIND 9.10.5b1 through 9.10.5rc2 BIND 9.11.0 through 9.11.0-P4 BIND 9.11.1b1 through 9.11.1rc2 BIND 9.9.9-S1 through 9.9.9-S9 Description The issue arises...

UBUNTU-CVE-2017-3136

A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were...

UBUNTU-CVE-2017-3138

named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some versions of name...

CVE-2017-3137

Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurred in an unusual order. Affects BIND...

PT-2017-15680

Name of the Vulnerable Software and Affected Versions BIND versions 9.9.9-P6 through 9.9.10rc1 BIND versions 9.10.4-P6 through 9.10.5rc1 BIND versions 9.11.0-P3 through 9.11.1rc1 BIND version 9.9.9-S8 Description The issue arises from mistaken assumptions about the ordering of records in the answ...

Security fix for the ALT Linux 9 package bind version 9.10.4.P8-alt1

April 12, 2017 Dmitry V. Levin 9.10.4.P8-alt1 - 9.10.4-P6 - 9.10.4-P8 fixes: CVE-2017-3136, CVE-2017-3137, CVE-2017-3138. - bind.service: pass $CHROOT to named-checkconf closes: 33239. - bind.init: check named configuration on startup...

ISC Releases Security Updates for BIND

The Internet Systems Consortium ISC has released updates that address multiple vulnerabilities in BIND. A remote attacker could exploit any of these vulnerabilities to cause a denial-of-service condition. Available updates include: BIND 9 version 9.9.9-P8 BIND 9 version 9.10.4-P8 BIND 9 version...

Scientific Linux Security Update : 389-ds-base on SL6.x i386/x86_64 (20170411)

Security Fixes : - An invalid pointer dereference flaw was found in the way 389-ds-base handled LDAP bind requests. A remote unauthenticated attacker could use this flaw to make ns-slapd crash via a specially crafted LDAP bind request, resulting in denial of service. CVE-2017-2668 Bug Fixes : -...

389-ds-base: Remote crash via crafted LDAP messages

An invalid pointer dereference flaw was found in the way 389-ds-base handled LDAP bind requests. A remote unauthenticated attacker could use this flaw to make ns-slapd crash via a specially crafted LDAP bind request, resulting in denial of service...

PT-2018-7171

Name of the Vulnerable Software and Affected Versions: 389-ds-base versions prior to 1.3.5.17 389-ds-base versions prior to 1.3.6.10 Description: The issue arises from an invalid pointer dereference when handling LDAP bind requests. A remote unauthenticated attacker could exploit this to cause...

DNSControl - Synchronize your DNS to multiple providers from a simple DSL

DNSControl is a system for maintaining DNS zones. It has two parts: a domain specific language DSL for describing DNS zones plus software that processes the DSL and pushes the resulting zones to DNS providers such as Route53, CloudFlare, and Gandi. It can talk to Microsoft ActiveDirectory and it...

USN-3201-1: Bind vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description It was discovered that Bind incorrectly handled rewriting certain query responses when using both DNS64 and RPZ. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a deni...