bind: Too long query name causes segmentation fault in lwresd

It was found that the lightweight resolver protocol implementation in BIND could enter an infinite recursion and crash when asked to resolve a query name which, when combined with a search list entry, exceeds the maximum allowable length. A remote attacker could use this flaw to crash lwresd or...

Synchronize Your DNS to Multiple Providers: DNSControl

Synchronize Your DNS to Multiple Providers DNSControl is a system for maintaining DNS zones. It has two parts: a domain specific language DSL for describing DNS zones plus software that processes the DSL and pushes the resulting zones to DNS providers such as Route53, CloudFlare, and Gandi. It ca...

Linux/x86 - Bind Shell Shellcode (42 bytes)

Linux/x86 - Bind Shell Shellcode 42 bytes. Shellcode exploit for Linx86 platform / SuperSmallBindShell 2 x86 Date: 17.03.2017 This shellcode will listen on random port and show you how deep the rabbit hole goes Please note that ports below 1024 require high privileges to bind! Shellcode Author:...

Linux/x86 - Bind Shell Shellcode (51 bytes)

/ SuperSmallBindShell x86 Date: 17.03.2017 This shellcode will listen on port 37 and show you how deep the rabbit hole goes Please note that 37 port is below 1024 and thus privileged! Shellcode Author: ALEH BOITSAU Shellcode Length: 51 bytes ; Tested on: Debian GNU/Linux 8/x8664 Command: gcc -m32...

ISC BIND Query Response Missing RRSIG Denial of Service (CVE-2016-9444)

A denial-of-service vulnerability has been reported in ISC BIND. The vulnerability is due to a defect that can cause the named service to exit with an assertion failure while processing a crafted response query containing certain record types without an accompanying RRSIG. A remote, unauthenticat...

AIX 7.1 TL 4 : bind (IV93363) (deprecated)

https://vulners.com/cve/CVE-2016-9131 https://vulners.com/cve/CVE-2016-9131 ISC BIND is vulnerable to a denial of service, caused by the improper handling of responses during recursion. By sending a malformed response to a RTYPE ANY query, a remote attacker could exploit this vulnerability to...

AIX 7.1 TL 3 : bind (IV93362) (deprecated)

https://vulners.com/cve/CVE-2016-9131 https://vulners.com/cve/CVE-2016-9131 ISC BIND is vulnerable to a denial of service, caused by the improper handling of responses during recursion. By sending a malformed response to a RTYPE ANY query, a remote attacker could exploit this vulnerability to...

AIX 6.1 TL 9 : bind (IV93361) (deprecated)

https://vulners.com/cve/CVE-2016-9131 https://vulners.com/cve/CVE-2016-9131 ISC BIND is vulnerable to a denial of service, caused by the improper handling of responses during recursion. By sending a malformed response to a RTYPE ANY query, a remote attacker could exploit this vulnerability to...

AIX 7.2 TL 1 : bind (IV93365) (deprecated)

https://vulners.com/cve/CVE-2016-9131 https://vulners.com/cve/CVE-2016-9131 ISC BIND is vulnerable to a denial of service, caused by the improper handling of responses during recursion. By sending a malformed response to a RTYPE ANY query, a remote attacker could exploit this vulnerability to...

AIX 5.3 TL 12 : bind (IV93366) (deprecated)

https://vulners.com/cve/CVE-2016-9131 https://vulners.com/cve/CVE-2016-9131 ISC BIND is vulnerable to a denial of service, caused by the improper handling of responses during recursion. By sending a malformed response to a RTYPE ANY query, a remote attacker could exploit this vulnerability to...

AIX 7.2 TL 0 : bind (IV93403) (deprecated)

https://vulners.com/cve/CVE-2016-9131 https://vulners.com/cve/CVE-2016-9131 ISC BIND is vulnerable to a denial of service, caused by the improper handling of responses during recursion. By sending a malformed response to a RTYPE ANY query, a remote attacker could exploit this vulnerability to...

CVE-2016-10200

Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service use-after-free by making multiple bind system calls without properly ascertaining whether a socket has the SOCKZAPPED status, related to...

There is a vulnerability in BIND that impacts AIX.

IBM SECURITY ADVISORY First Issued: Tue Mar 7 15:49:49 CST 2017 |Updated: Mon Oct 2 11:03:19 CDT 2017 |Update 1: Changed impacted fileset for AIX 7200-01. | Changed from: bos.net.tcp.clientcore | to: bos.net.tcp.bindutils 7.2.1.0-7.2.1.1. The most recent version of this document is available here...

ISC BIND RRSIG Record Response Assertion Failure Denial of Service (CVE-2016-9147)

A denial-of-service vulnerability has been reported in ISC BIND. The vulnerability is due to a defect that can cause named service to exit with an assertion failure while processing a crafted DNS response packet containing malformed RRSIG record. A remote, unauthenticated attacker could exploit...

openSUSE Security Update : bind (openSUSE-2017-314)

This update for bind fixes the following issues : - Fixed a possible denial of service vulnerability affected only configurations using both DNS64 and RPZ, CVE-2017-3135, bsc1024130 This update was imported from the SUSE:SLE-12-SP1:Update update project. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2016-10200

Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service use-after-free by making multiple bind system calls without properly ascertaining whether a socket has the SOCKZAPPED status, related to...

[SECURITY] Fedora 24 Update: bind99-9.9.9-4.P6.fc24

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP...

[SECURITY] Fedora 25 Update: bind99-9.9.9-4.P6.fc25

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP...

SUSE SLES12 Security Update : bind (SUSE-SU-2017:0594-1)

This update for bind fixes the following issues : - Fixed a possible denial of service vulnerability affected only configurations using both DNS64 and RPZ, CVE-2017-3135, bsc1024130 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLES11 Security Update : bind (SUSE-SU-2017:0595-1)

This update for bind fixes the following issues : - Fixed a possible denial of service vulnerability affected only configurations using both DNS64 and RPZ, CVE-2017-3135, bsc1024130 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...