CVE-2017-5383

URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name spoofing attacks in the location bar. This vulnerability affects Thunderbird 45.7, Firefox ESR 45.7, and Firefox 51...

Mozilla Firefox < 51 Multiple Vulnerabilities (macOS)

The version of Mozilla Firefox installed on the remote macOS or Mac OS X host is prior to 51. It is, therefore, affected by the following vulnerabilities : - Mozilla developers and community members Christian Holler, Gary Kwong, Andre Bargull, Jan de Mooij, Tom Schuster, and Oriol reported memory...

Mozilla Firefox ESR 45.x < 45.7 Multiple Vulnerabilities (macOS)

The version of Mozilla Firefox ESR installed on the remote macOS or Mac OS X host is 45.x prior to 45.7. It is, therefore, affected by the following vulnerabilities : - Mozilla developers and community members Christian Holler, Gary Kwong, Andre Bargull, Jan de Mooij, Tom Schuster, and Oriol...

PT-2017-16470

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 45.7 Firefox ESR versions prior to 45.7 Firefox versions prior to 51 Description The issue allows for domain name spoofing attacks in the location bar due to URLs containing certain unicode glyphs for alternative...

Cisco Webex Meetings Server Information Disclosure Vulnerability

A vulnerability in Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to view the fully qualified domain name of the Cisco Webex administration server. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

[SECURITY] Fedora 24 Update: bind99-9.9.9-4.P5.fc24

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP...

[SECURITY] Fedora 24 Update: bind-9.10.4-3.P5.fc24

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

bind: assertion failure while processing response to an ANY query

A denial of service flaw was found in the way BIND processed a response to an ANY query. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

[SECURITY] Fedora 25 Update: bind99-9.9.9-4.P5.fc25

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP...

ISC BIND 9 DS Response Assertion Failure Denial of Service Vulnerability

BIND is an open source suite of software for implementing the DNS protocol. A DS response assertion failure denial of service vulnerability exists in ISC BIND 9. A remote attacker can exploit the vulnerability to cause a denial of service via a specially crafted DS resource logging response that...

USN-3172-1: Bind vulnerabilities

It was discovered that Bind incorrectly handled certain malformed responses to an ANY query. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. CVE-2016-9131 It was discovered that Bind incorrectly handled certain malformed responses to an AN...

ALPINE-CVE-2016-9147

named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service assertion failure and daemon exit via a response containing an inconsistency among the DNSSEC-related RRsets...

ISC BIND 9 db.c Assertion Failure Denial of Service Vulnerability

BIND is a suite of open source software for implementing the DNS protocol. A db.c assertion failure denial of service vulnerability exists in ISC BIND 9. When an authoritative server overrides a zone using the nxdomain-redirect feature, an attacker can cause an assertion failure resulting in a...

Dual DHCP DNS Server Denial of Service Vulnerability

Dual DHCP DNS Server is a LAN software that provides both DHCP and DNS servers. A denial of service vulnerability exists in Dual DHCP DNS Server version 7.29, which can be exploited by attackers to cause a denial of service program crash...

[SECURITY] Fedora 25 Update: bind-9.10.4-2.P4.fc25

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

bind: assertion failure while handling responses containing a DNAME answer

A denial of service flaw was found in the way BIND handled responses containing a DNAME answer. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

glibc: Stack overflow in nss_dns_getnetbyname_r

A stack overflow vulnerability was found in nssdnsgetnetbynamer. On systems with nsswitch configured to include "networks: dns" with a privileged or network-facing service that would attempt to resolve user-provided network names, an attacker could provide an excessively long network name,...

USN-3119-1 bind9 vulnerability

Tony Finch and Marco Davids discovered that Bind incorrectly handled certain responses containing a DNAME answer. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service...

bind: assertion failure in buffer.c while building responses to a specifically constructed request

A denial of service flaw was found in the way BIND constructed a response to a query that met certain criteria. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS request packet...

[SECURITY] Fedora 23 Update: bind99-9.9.9-2.P3.fc23

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP...