2404 matches found
CVE-2010-3762
ISC BIND before 9.7.2-P2 with DNSSEC validation enabled is vulnerable when multiple trust anchors exist for a zone, allowing remote attackers to trigger a denial of service (daemon crash) via a DNS query. Affected products/contexts shown in connected advisories (e.g., F5 SOL15172, Debian/Oracle/L...
CVE-2010-3762
ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote attackers to cause a denial of service daemon crash via a DNS query...
CVE-2010-3762
ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote attackers to cause a denial of service daemon crash via a DNS query...
CVE-2010-3762
ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote attackers to cause a denial of service daemon crash via a DNS query...
CVE-2010-3762: Improper Input Validation
ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote attackers to cause a denial of service daemon crash via a DNS query...
ISC BIND 9.7 < 9.7.2 P2 Multiple Vulnerabilities
Binary data 5673.prm...
It's Official: DNSSEC Fully Updated
Two years after a major flaw was exposed in the Internet’s Domain Name System DNS, a major upgrade to the infrastructure protocol that fixes that weakness is now up and running in all of the Internet root servers. Read the full article. Dark Reading...
CVE-2010-0213
CVE-2010-0213 affects BIND 9.7.1 and 9.7.1-P1 when a recursive validating server uses a statically configured trust anchor or DNSSEC Lookaside Validation (DLV). The flaw allows remote attackers to trigger a denial of service (infinite loop) by issuing a query for an RRSIG record whose answer is n...
CVE-2010-0213
BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation DLV, allows remote attackers to cause a denial of service infinite loop via a query for an RRSIG record whose answer is not in the cache, which causes BI...
CVE-2010-0213
BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation DLV, allows remote attackers to cause a denial of service infinite loop via a query for an RRSIG record whose answer is not in the cache, which causes BI...
Debian: Security Advisory (DSA-2054-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 2054-2 (bind9)
The remote host is missing an update to bind9 announced via advisory DSA 2054-2. OpenVAS Vulnerability Test $Id: deb20542.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2054-2 bind9 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
[slackware-security] bind
New bind packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues when DNSSEC is enabled which is not the default setting. Here are the details from the Slackware 13.1 ChangeLog:...
DNSSEC Ceremony Generates Master Root Key
The dream of bolting security onto the Internet’s Domain Name System takes one step closer to reality as Internet policymakers hosted a ceremony in northern Virginia to generate and store the first cryptographic key that will be used to secure the Internet’s root zone. Read the full article...
[SECURITY] [DSA 2054-2] New bind9 packages fix cache poisoning
-------------------------------------------------------------------------- Debian Security Advisory DSA 2054-2 [email protected] http://www.debian.org/security/ Martin Schulze June 15th, 2010 http://www.debian.org/security/faq -...
Debian: Security Advisory (DSA-2054-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 2054-1 (bind9)
The remote host is missing an update to bind9 announced via advisory DSA 2054-1. OpenVAS Vulnerability Test $Id: deb20541.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2054-1 bind9 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
Debian DSA-2054-1 : bind9 - DNS cache poisoning
Several cache-poisoning vulnerabilities have been discovered in BIND. These vulnerabilities apply only if DNSSEC validation is enabled and trust anchors have been installed, which is not the default. The Common Vulnerabilities and Exposures project identifies the following problems : -...
[SECURITY] [DSA 2054-1] New bind9 packages fix cache poisoning
------------------------------------------------------------------------ Debian Security Advisory DSA-2054-1 [email protected] http://www.debian.org/security/ Florian Weimer June 04, 2010 http://www.debian.org/security/faq -...