OracleVM 3.2 : bind (OVMSA-2016-0055)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite - Fix CVE-2016-1285, CVE-2016-1286 - Fix CVE-2015-8704 - Fix CVE-2015-8000 - Fix CVE-2015-5722 - Fix CVE-2015-5477 - Remove...

Oracle: Security Advisory (ELSA-2012-1123)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : rhev-hypervisor6 (RHSA-2012:1200)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2012:1200 advisory. The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization...

Juniper Networks Junos OS NAT Protocol Translation Denial of Service Vulnerability

DoS in NAT Protocol Translation SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if description...

CVE-2014-3817

CVE-2014-3817 affects Juniper Networks Junos OS on SRX Series devices, where NAT protocol translation from IPv6 to IPv4 enabled allows remote attackers to cause a denial of service by sending a crafted IPv6→IPv4 packet that can hang or crash the flowd process. The issue impacts Junos versions lis...

Juniper Networks Junos OS DNSSEC validation Denial of Service

Heavy DNSSEC validation load can cause assertion failure in Bind of Junos OS. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Amazon Linux AMI : bind (ALAS-2012-113)

An uninitialized data structure use flaw was found in BIND when DNSSEC validation was enabled. A remote attacker able to send a large number of queries to a DNSSEC validating BIND resolver could use this flaw to cause it to exit unexpectedly with an assertion failure. CVE-2012-3817 C Tenable...

Oracle Linux 5 : bind97 (ELSA-2012-1122)

"From Red Hat Security Advisory 2012:1122 : Updated bind97 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score,...

Oracle Linux 6 : bind (ELSA-2013-0550)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0550 advisory. - fix CVE-2012-5689 - fix CVE-2012-5688 - fix CVE-2012-5166 - fix CVE-2012-4244 - fix CVE-2012-3817 Tenable has extracted the preceding description block direct...

CentOS 5 / 6 : bind (CESA-2012:1123)

"Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

CentOS 5 : bind97 (CESA-2012:1122)

"Updated bind97 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Juniper Junos DNSSEC Validation DoS (PSN-2013-04-918)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. When DNSSEC is enabled and validation is active, a high query load can cause the host to crash. A remote, unauthenticated attacker could exploit this to crash the host. C Tenable Network...

ISC BIND 9 Multiple DoS

Binary data 6807.prm...

SuSE 11.1 / 11.2 Security Update : bind (SAT Patch Numbers 6604 / 6605)

The bind nameserver was updated to fix a crash denial of service that might have happened during high DNSSEC validation load. CVE-2012-3817 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. T...

Six Security Flaws Fixed in BIND 9.9.2

A new version of the BIND DNS server software is available, fixing six security vulnerabilities and a long list of other bugs. BIND 9.9.2-P1 is mainly a security update and most of the issues it fixes are crashes and not remote code execution flaws. BIND is the overwhelming leader in market share...

VMSA-2012-0016 : VMware security updates for vSphere API and ESX Service Console

a. VMware vSphere API denial of service vulnerability The VMware vSphere API contains a denial of service vulnerability. This issue allows an unauthenticated user to send a maliciously crafted API request and disable the host daemon. Exploitation of the issue would prevent management activities o...

Gentoo Security Advisory GLSA 201209-04 (bind)

The remote host is missing updates announced in advisory GLSA 201209-04. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201209-04 (bind)

The remote host is missing updates announced in advisory GLSA 201209-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Mandriva Linux Security Advisory : bind (MDVSA-2012:119)

A vulnerability was discovered and corrected in bind : High numbers of queries with DNSSEC validation enabled can cause an assertion failure in named, caused by using a bad cache data structure before it has been initialized CVE-2012-3817. The updated packages have been upgraded to bind 9.7.6-P2...

SuSE 10 Security Update : bind (ZYPP Patch Number 8237)

The bind nameserver was updated to fix a crash denial of service that may have been caused by high DNSSEC validation load. CVE-2012-3817 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'...