SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2016:0759-1)

This update for bind fixes the following issues : Fix two assertion failures that can lead to a remote denial of service attack : - CVE-2016-1285: An error when parsing signature records for DNAME can lead to named exiting due to an assertion failure. bsc970072 - CVE-2016-1286: An error when...

bind security update

30:9.3.6-25.P1.8 - Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite 30:9.3.6-25.P1.7 - Fix CVE-2016-1285 and CVE-2016-1286...

bind97 security update

32:9.7.0-21.P2.6 - Fix CVE-2016-1285 and CVE-2016-1286...

SUSE-SU-2016:0780-1 Security update for bind

This update for bind fixes the following issues: Fix two assertion failures that can lead to a remote denial of service attack: CVE-2016-1285: An error when parsing signature records for DNAME can lead to named exiting due to an assertion failure. bsc970072 CVE-2016-1286: An error when parsing...

SUSE-SU-2016:0759-1 Security update for bind

This update for bind fixes the following issues: Fix two assertion failures that can lead to a remote denial of service attack: CVE-2016-1285: An error when parsing signature records for DNAME can lead to named exiting due to an assertion failure. bsc970072 CVE-2016-1286: An error when parsing...

bind: denial of service

CVE-2016-2088 denial of service Allows remote attackers to cause a denial of service INSIST assertion failure and daemon exit via a malformed packet with more than one cookie option. - CVE-2016-1286 denial of service Allows remote attackers to cause a denial of service assertion failure and...

Amazon Linux AMI : bind (ALAS-2016-665)

A defect in control channel input handling was discovered which can cause named to exit due to an assertion failure in sexpr.c or alist.c when a malformed packet is sent to named's control channel. If control channel input is accepted from the network limited to localhost by default, an...

[slackware-security] bind

New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/bind-9.9.8P4-i486-1slack14.1.txz: Upgraded. Fixed security issues: Fix resolver assertion failure due to...

Ubuntu: Security Advisory (USN-2925-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : Bind vulnerabilities (USN-2925-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2925-1 advisory. It was discovered that Bind incorrectly handled input received by the rndc control channel. A remote attacker could possibly use this issue to cause Bind...

Debian DSA-3511-1 : bind9 - security update

Two vulnerabilites have been discovered in ISC's BIND DNS server. - CVE-2016-1285 A maliciously crafted rdnc, a way to remotely administer a BIND server, operation can cause named to crash, resulting in denial of service. - CVE-2016-1286 An error parsing DNAME resource records can cause named to...

CVE-2016-1286

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted signature record for a DNAME record, related to db.c and resolver.c...

BELL-CVE-2016-1286 CVE-2016-1286 does not affect BellSoft software

Bulletin has no description...

CVE-2016-1286

CVE-2016-1286 affects ISC BIND 9.x (before 9.9.8-P4 and 9.10.x before 9.10.3-P4). A remote attacker can trigger a denial of service by sending a crafted DNS signature for a DNAME record, leading to an assertion failure in resolver.c or db.c and a named process crash. The issue is documented with ...

[SECURITY] [DSA 3511-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3511-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 09, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3511-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3511-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 09, 2016 https://www.debian.org/security/faq -...

USN-2925-1: Bind vulnerabilities

It was discovered that Bind incorrectly handled input received by the rndc control channel. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. CVE-2016-1285 It was discovered that Bind incorrectly parsed resource record signatures for DNAME...

UBUNTU-CVE-2016-1286

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted signature record for a DNAME record, related to db.c and resolver.c...

DSA-3511-1 bind9 - security update

Bulletin has no description...

Debian Security Advisory DSA 3511-1 (bind9 - security update)

Two vulnerabilities have been discovered in ISC OpenVAS Vulnerability Test $Id: deb3511.nasl 7585 2017-10-26 15:03:01Z cfischer $ Auto-generated from advisory DSA 3511-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2016 Greenbone Networks GmbH...