192 matches found
FreeBSD : BIND -- Remote Denial of Service vulnerability (c8d902b1-8550-11e6-81e7-d050996490d0)
ISC reports : Testing by ISC has uncovered a critical error condition which can occur when a nameserver is constructing a response. A defect in the rendering of messages into packets can cause named to exit with an assertion failure in buffer.c while constructing a response to a query that meets...
SUSE SLES11 Security Update : bind (SUSE-SU-2016:2405-1)
The nameserver bind was updated to fix a remote denial of service vulnerability, where a crafted packet could cause the nameserver to abort. CVE-2016-2776, bsc1000362 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...
CentOS 5 : bind97 (CESA-2016:1945)
"An update for bind97 is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
SUSE SLES12 Security Update : bind (SUSE-SU-2016:2401-1)
The nameserver bind was updated to fix a remote denial of service vulnerability, where a crafted packet could cause the nameserver to abort. CVE-2016-2776, bsc1000362 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...
Debian DSA-3680-1 : bind9 - security update
Two vulnerabilities were reported in BIND, a DNS server. - CVE-2016-2775 The lwresd component in BIND which is not enabled by default could crash while processing an overlong request name. This could lead to a denial of service. - CVE-2016-2776 A crafted query could crash the BIND name server...
[slackware-security] bind
New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/bind-9.10.4P3-i586-1slack14.2.txz: Upgraded. This update fixes a denial-of-service vulnerability. Testi...
[SECURITY] [DSA 3680-1] bind9 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3680-1 [email protected] https://www.debian.org/security/ Florian Weimer September 27, 2016 https://www.debian.org/security/faq -...
SUSE-SU-2016:2401-1 Security update for bind
The nameserver bind was updated to fix a remote denial of service vulnerability, where a crafted packet could cause the nameserver to abort. CVE-2016-2776, bsc1000362...
SUSE-SU-2016:2399-1 Security update for bind
The nameserver bind was updated to fix a remote denial of service vulnerability, where a crafted packet could cause the nameserver to abort. CVE-2016-2776, bsc1000362...
Security fix for the ALT Linux 8 package bind version 9.9.8-alt4
9.9.8-alt4 built Sept. 27, 2016 Gleb Fotengauer-Malinovskiy in task 170059 Sept. 27, 2016 Gleb Fotengauer-Malinovskiy - Applied upstream fix for CVE-2016-2776...
Security fix for the ALT Linux 9 package bind version 9.9.8-alt4
Sept. 27, 2016 Gleb Fotengauer-Malinovskiy 9.9.8-alt4 - Applied upstream fix for CVE-2016-2776...
DSA-3680-1 bind9 - security update
Bulletin has no description...
Security fix for the ALT Linux 7 package bind version 9.9.8-alt2.M70P.2
9.9.8-alt2.M70P.2 built Sept. 27, 2016 Gleb Fotengauer-Malinovskiy in task 170055 Sept. 27, 2016 Gleb Fotengauer-Malinovskiy - Applied upstream fix for CVE-2016-2776...
CVE-2016-2776
buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted query...
OracleVM 3.2 : sudo (OVMSA-2016-0079)
The remote OracleVM system is missing necessary patches to address critical security updates : - added patch for CVE-2014-0106: certain environment variables not sanitized when envreset is disabled Resolves: rhbz1072210 - backported fixes for CVE-2013-1775 CVE-2013-1776 CVE-2013-2776 CVE-2013-277...
Ubuntu: Security Advisory (USN-2776-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-2776-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2776-1 advisory. It was discovered that the Linux kernel did not check if a new IPv6 MTU set by a user space application was valid. A remote attacker could forge a route...
Amazon Linux: Security Advisory (ALAS-2013-259)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 3208-1] freexl security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3208-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 29, 2015 http://www.debian.org/security/faq -...
