RHEL 5 : bind97 (RHSA-2012:1122)

"Updated bind97 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

DSA-2517-1 bind9 - denial of service

Bulletin has no description...

CVE-2012-3817

ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does not properly initialize the failing-query cache, which allows remote attackers to cause a denial of service assertion...

CVE-2012-3817

ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does not properly initialize the failing-query cache, which allows remote attackers to cause a denial of service assertion...

CVE-2012-3817

ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does not properly initialize the failing-query cache, which allows remote attackers to cause a denial of service assertion...

PT-2012-5019

Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.4.x through 9.7.x before 9.7.6-P2 ISC BIND versions 9.8.x before 9.8.3-P2 ISC BIND versions 9.9.x before 9.9.1-P2 ISC BIND 9.6-ESV before 9.6-ESV-R7-P2 Description The issue occurs when DNSSEC validation is enabled and the...

FreeBSD : dns/bind9* -- Heavy DNSSEC Validation Load Can Cause a 'Bad Cache' Assertion Failure (0bc67930-d5c3-11e1-bef6-0024e81297ae)

ISC reports : High numbers of queries with DNSSEC validation enabled can cause an assertion failure in named, caused by using a 'bad cache' data structure before it has been initialized. BIND 9 stores a cache of query names that are known to be failing due to misconfigured name servers or a broke...

dns/bind9* -- Heavy DNSSEC Validation Load Can Cause a 'Bad Cache' Assertion Failure

ISC reports: High numbers of queries with DNSSEC validation enabled can cause an assertion failure in named, caused by using a 'bad cache' data structure before it has been initialized. BIND 9 stores a cache of query names that are known to be failing due to misconfigured name servers or a broken...

Medium: openldap

Issue Overview: A denial of service flaw was found in the way the OpenLDAP server daemon slapd processed certain search queries requesting only attributes and no values. In certain configurations, a remote attacker could issue a specially-crafted LDAP search query that, when processed by slapd,...

CVE-2012-1164

slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service assertion failure and daemon exit via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned...

CVE-2012-1164: Improper Restriction of Operations within the Bounds of a Memory Buffer

slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service assertion failure and daemon exit via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned...

CVE-2012-1164

slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service assertion failure and daemon exit via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned...

CVE-2012-2819

The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20.0.1132.43 does not properly handle uploads to floating-point textures, which allows remote attackers to cause a denial of service assertion failure and application crash or possibly have unspecified other impact vi...

UBUNTU-CVE-2012-2819

The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20.0.1132.43 does not properly handle uploads to floating-point textures, which allows remote attackers to cause a denial of service assertion failure and application crash or possibly have unspecified other impact vi...

CVE-2012-2819

CVE-2012-2819 affects Google Chrome’s WebGL texSubImage2D implementation, where uploads to floating-point textures are mishandled. This can trigger an assertion failure and crash the browser, with potential additional impact as per the vulnerability description. Remediation is to update Chrome to...

CVE-2012-2819

Removed by vendor...

openldap security and bug fix update

2.4.23-26 - fix: MozNSS CA cert dir does not work together with PEM CA cert file 818844 - fix: memory leak: defurlpre is not freed 816168 - fix update: Default SSL certificate bundle is not found by openldap library 742023 2.4.23-25 - fix update: Default SSL certificate bundle is not found by...

PT-2012-4280

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 20.0.1132.43 Description The issue is related to the texSubImage2D implementation in the WebGL subsystem, which does not properly handle uploads to floating-point textures. This can be exploited by remote...

RHEL 6 : openldap (RHSA-2012:0899)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0899 advisory. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. A denial of service flaw was found...

PT-2012-1160

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.30 Description The issue allows remote attackers to cause a denial of service, leading to an assertion failure and daemon exit, via an LDAP search query with attrsOnly set to true. This results in empty attribute...