155 matches found
Fedora 23 : bind99-9.9.8-4.P4.fc23 (2016-5047abe4a9)
New version fixing CVE-2016-1285 CVE-2016-1286 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
bind97 security update
32:9.7.0-21.P2.6 - Fix CVE-2016-1285 and CVE-2016-1286...
SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2016:0759-1)
This update for bind fixes the following issues : Fix two assertion failures that can lead to a remote denial of service attack : - CVE-2016-1285: An error when parsing signature records for DNAME can lead to named exiting due to an assertion failure. bsc970072 - CVE-2016-1286: An error when...
SUSE-SU-2016:0780-1 Security update for bind
This update for bind fixes the following issues: Fix two assertion failures that can lead to a remote denial of service attack: CVE-2016-1285: An error when parsing signature records for DNAME can lead to named exiting due to an assertion failure. bsc970072 CVE-2016-1286: An error when parsing...
SUSE-SU-2016:0759-1 Security update for bind
This update for bind fixes the following issues: Fix two assertion failures that can lead to a remote denial of service attack: CVE-2016-1285: An error when parsing signature records for DNAME can lead to named exiting due to an assertion failure. bsc970072 CVE-2016-1286: An error when parsing...
bind: denial of service
CVE-2016-2088 denial of service Allows remote attackers to cause a denial of service INSIST assertion failure and daemon exit via a malformed packet with more than one cookie option. - CVE-2016-1286 denial of service Allows remote attackers to cause a denial of service assertion failure and...
Amazon Linux AMI : bind (ALAS-2016-665)
A defect in control channel input handling was discovered which can cause named to exit due to an assertion failure in sexpr.c or alist.c when a malformed packet is sent to named's control channel. If control channel input is accepted from the network limited to localhost by default, an...
[slackware-security] bind
New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/bind-9.9.8P4-i486-1slack14.1.txz: Upgraded. Fixed security issues: Fix resolver assertion failure due to...
Ubuntu: Security Advisory (USN-2925-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS : Bind vulnerabilities (USN-2925-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2925-1 advisory. It was discovered that Bind incorrectly handled input received by the rndc control channel. A remote attacker could possibly use this issue to cause Bind...
Debian DSA-3511-1 : bind9 - security update
Two vulnerabilites have been discovered in ISC's BIND DNS server. - CVE-2016-1285 A maliciously crafted rdnc, a way to remotely administer a BIND server, operation can cause named to crash, resulting in denial of service. - CVE-2016-1286 An error parsing DNAME resource records can cause named to...
CVE-2016-1286
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted signature record for a DNAME record, related to db.c and resolver.c...
BELL-CVE-2016-1286 CVE-2016-1286 does not affect BellSoft software
Bulletin has no description...
CVE-2016-1286
CVE-2016-1286 affects ISC BIND 9.x (before 9.9.8-P4 and 9.10.x before 9.10.3-P4). A remote attacker can trigger a denial of service by sending a crafted DNS signature for a DNAME record, leading to an assertion failure in resolver.c or db.c and a named process crash. The issue is documented with ...
[SECURITY] [DSA 3511-1] bind9 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3511-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 09, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3511-1] bind9 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3511-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 09, 2016 https://www.debian.org/security/faq -...
USN-2925-1: Bind vulnerabilities
It was discovered that Bind incorrectly handled input received by the rndc control channel. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. CVE-2016-1285 It was discovered that Bind incorrectly parsed resource record signatures for DNAME...
UBUNTU-CVE-2016-1286
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted signature record for a DNAME record, related to db.c and resolver.c...
Debian Security Advisory DSA 3511-1 (bind9 - security update)
Two vulnerabilities have been discovered in ISC OpenVAS Vulnerability Test $Id: deb3511.nasl 7585 2017-10-26 15:03:01Z cfischer $ Auto-generated from advisory DSA 3511-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2016 Greenbone Networks GmbH...