4906 matches found
CVE-2016-9131: Improper Input Validation
named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service assertion failure and daemon exit via a malformed response to an RTYPE ANY query...
SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2017:0111-1)
This update for bind fixes the following issues : - Fix a potential assertion failure that could have been triggered by a malformed response to an ANY query, thereby facilitating a denial-of-service attack. CVE-2016-9131, bsc1018700, bsc1018699 - Fix a potential assertion failure that could have...
CVE-2016-9147: Improper Input Validation
named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service assertion failure and daemon exit via a response containing an inconsistency among the DNSSEC-related RRsets...
SUSE-SU-2017:0112-1 Security update for bind
This update for bind fixes the following issues: - Fix a potential assertion failure that could have been triggered by a malformed response to an ANY query, thereby facilitating a denial-of-service attack. CVE-2016-9131, bsc1018700, bsc1018699 - Fix a potential assertion failure that could have...
SUSE-SU-2017:0113-1 Security update for bind
This update for bind fixes the following issues: - Fix a potential assertion failure that could have been triggered by a malformed response to an ANY query, thereby facilitating a denial-of-service attack. CVE-2016-9131, bsc1018700, bsc1018699 - Fix a potential assertion failure that could have...
PT-2017-10326
Name of the Vulnerable Software and Affected Versions BIND versions 9.9.8-S1 through 9.9.8-S3 BIND versions 9.9.9-S1 through 9.9.9-S6 BIND versions 9.11.0 through 9.11.0-P1 Description The issue arises from an error in handling certain queries, which can cause an assertion failure when the...
CVE-2016-9778
An error in handling certain queries can cause an assertion failure when a server is using the nxdomain-redirect feature to cover a zone for which it is also providing authoritative service. A vulnerable server could be intentionally stopped by an attacker if it was using a configuration that met...
PT-2017-9968
Name of the Vulnerable Software and Affected Versions ISC BIND 9.x before 9.9.9-P5 ISC BIND 9.10.x before 9.10.4-P5 ISC BIND 9.11.x before 9.11.0-P2 Description The issue allows remote attackers to cause a denial of service via a malformed response to an RTYPE ANY query, resulting in an assertion...
PT-2017-10114
Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.17 Description The issue allows remote attackers to cause a denial of service due to an assertion failure. This is related to the jpc floorlog2 function in jpc math.c. The estimated number of potentially affected...
PT-2017-10112
Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.25 Description The issue allows remote attackers to cause a denial of service, specifically an assertion failure, by providing a crafted file. This is related to the jas seq2d create function in jas seq.c...
ISC BIND 'buffer.c' Assertion Failure Denial of Service Vulnerability - Windows
ISC BIND is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; ifdescription...
ISC BIND 'buffer.c' Assertion Failure Denial of Service Vulnerability - Linux
ISC BIND is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; ifdescription...
ISC BIND 9 DNSSEC Assertion Failure Denial of Service Vulnerability
ISC BIND is the United States Internet Systems Consortium ISC company maintains a set of open source software that implements the DNS protocol. A remote denial of service vulnerability exists in ISC BIND named, which can be exploited to cause a denial of service by an attacker who incorrectly...
PT-2017-10104
Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.13 Description The issue is related to an integer overflow in the jpc dec process siz function, which can be triggered by a crafted file. This leads to an assertion failure. Recommendations For versions prior to...
Scientific Linux Security Update : squid on SL7.x x86_64 (20161103)
The following packages have been upgraded to a newer upstream version: squid 3.5.20. Security Fixes : - Incorrect boundary checks were found in the way squid handled headers in HTTP responses, which could lead to an assertion failure. A malicious HTTP server could use this flaw to crash squid usi...
PT-2017-12377 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.8.11 Description: The issue allows privileged KVM guest OS users to cause a denial of service, leading to an assertion failure and host OS crash, by accessing the Performance Monitors Cycle Count Register...
LibTIFFtif_predict.h/tif_predict.c Buffer Overflow Vulnerability
Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files. A buffer overflow vulnerability exists in libtiff version 4.0.6 in tifpredict.h/tifpredict.c...
UBUNTU-CVE-2016-9535
tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka "Predictor heap-buffer-overflow."...
