F5 Networks BIG-IP : BIND vulnerability (SOL17227)

An incorrect boundary check in openpgpkey61.c can cause named to terminate due to a REQUIRE assertion failure. This defect can be deliberately exploited by an attacker who can provide a maliciously constructed response in answer to a query. C Tenable Network Security, Inc. The descriptive text an...

ISC BIND 9.0.x < 9.9.7-P3 / 9.10.x < 9.10.2-P4 Multiple DoS

According to its self-reported version number, the installation of ISC BIND running on the remote name server is potentially affected by the following vulnerabilities : - A denial of service vulnerability exists due to an assertion flaw that is triggered when parsing malformed DNSSEC keys. An...

Fedora 23 : bind99-9.9.7-7.P3.fc23 (2015-14954)

Fixed https://bugzilla.redhat.com/showbug.cgi?id=1259563 https://bugzilla.redhat.com/showbug.cgi?id=1259691 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as mu...

CVE-2015-5986

ISC BIND vulnerability CVE-2015-5986 arises from an incorrect boundary check in openpgpkey_61.c within named, allowing remote attackers to crash the server via a crafted DNS response. Affected products/versions: BIND 9.9.7 before 9.9.7‑P3 and 9.10.x before 9.10.2‑P4. Exploitation can cause a deni...

bind: denial of service

CVE-2015-5722 Parsing malformed keys may cause BIND to exit due to a failed assertion in buffer.c: Parsing a malformed DNSSEC key can cause a validating resolver to exit due to a failed assertion in buffer.c. It is possible for a remote attacker to deliberately trigger this condition, for example...

Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : bind (SSA:2015-245-01)

New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2015-245-01. The text itsel...

Apple Mac OS X Multiple Vulnerabilities -04 (Sep 2014)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-5986

The CVE-2014-5986 entry concerns the Android app Educational Puzzles - Letters (com.EducationalPuzzlesLetters) version 2, which does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted ...

CVE-2013-5986

CVE-2013-5986 is referenced in Gentoo GLSA 201402-02, which notes a vulnerability caused by the driver allowing unprivileged user‑mode software to access the GPU. Other provided documents do not specify product/vendor/version details or remediation for this CVE.

CVE-2013-5986

Unspecified vulnerability in NVIDIA graphics driver Release 331, 325, 319, 310, and 304 has unknown impact and attack vectors, a different vulnerability than CVE-2013-5987...

Apple iOS < 4.3.4 Multiple Vulnerabilities

Binary data 5986.prm...

CVE-2008-5986

Technical details for CVE-2008-5986 are not publicly provided in the supplied documents. The initial entry mentions an untrusted search path vulnerability in Csound components, but no vendor/version specifics or fixes are included here. Monitor for updates.

CVE-2007-5986

CVE-2007-5986 describes an SQL injection in BtiTracker (affected in versions before 1.4.5). The vulnerability exists in include/functions.php and allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The connected sources confirm the product and vulnerable component b...

CVE-2006-5986

CVE-2006-5986 : In Extreme CMS 0.9 (and possibly earlier), admin/options.php does not require authentication, potentially allowing remote attackers to perform unauthorized activities. This issue can be combined with another vulnerability to broaden a cross-site scripting (XSS) attack without auth...