bind: assertion failure triggered by a packet with malformed options

A denial of service flaw was found in the way BIND handled packets with malformed options. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS packet...

bind: assertion failure triggered by a packet with malformed options

A denial of service flaw was found in the way BIND handled packets with malformed options. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS packet...

The vulnerability of the Mac OS X operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the mDNSResponder component in the Mac OS X operating system is related to the use of DNS proxies to listen to all interfaces when using VMnet.framework. Exploiting this vulnerability allows a malicious actor to obtain confidential information by sending DNS requests to...

[SECURITY] Fedora 25 Update: bind-9.10.4-2.P3.fc25

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

[SECURITY] Fedora 25 Update: bind99-9.9.9-2.P3.fc25

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP...

PT-2016-4493

Name of the Vulnerable Software and Affected Versions TP-LINK devices affected versions not specified Description The issue concerns TP-LINK's loss of control over two domains, www.tplinklogin.net and tplinkextender.net, which are physically printed on many of their devices. Recommendations At th...

[SECURITY] Fedora 24 Update: bind99-9.9.9-2.P3.fc24

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP...

Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2016-08389)

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices.DNS Forwarder is one of the DNS forwarder components. A denial of service vulnerability exists in the DNS Forwarder feature in Cisco IOS and IOS XE Software. A remote attacker could exploit this...

bind: assertion failure in buffer.c while building responses to a specifically constructed request

A denial of service flaw was found in the way BIND constructed a response to a query that met certain criteria. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS request packet...

Apple OS X mDNSResponder Information Disclosure Vulnerability

Apple OS X is a suite of specialized operating systems developed by Apple for Mac computers. mDNSResponder is a component that provides unicast and multicast mDNS service. An information disclosure vulnerability exists in mDNSResponder in versions of Apple OS X prior to 10.12, which can be...

USN-3088-1 bind9 vulnerability

It was discovered that Bind incorrectly handled building responses to certain specially crafted requests. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service...

CVE-2016-4739

mDNSResponder in Apple OS X before 10.12, when VMnet.framework is used, arranges for a DNS proxy to listen on all interfaces, which allows remote attackers to obtain sensitive information by sending a DNS query to an unintended interface...

UBUNTU-CVE-2016-4760

WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to conduct DNS rebinding attacks against non-HTTP Safari sessions by leveraging HTTP/0.9 support...

Arbitrary Command Execution Vulnerability in Intelligent DNS System of Zhengzhou Glacier Network Technology Co.

Zhengzhou Glacier Networks Technology Co., Ltd Glacier Networks is a provider of embedded software product development and network application layer management equipment. An arbitrary command execution vulnerability exists in the Intelligent DNS system of Zhengzhou Glacier Network Technology Co. ...

Cisco EPC 3925 XSS / CSRF / HTTP Response Injection / DoS

Title: Cisco EPC 3925 Multiple Vulnerabilities Vendor: http://www.cisco.com/ Vulnerable Versions: Cisco EPC3925 EuroDocsis 3.0 2-PORT Voice Gateway Date: 15.09.2016 Author: Patryk Bogdan ======== Vulnerability list: 1. HTTP Response Injection via 'Lang' Cookie 2. DoS via 'Lang' Cookie 3. DoS in...

Could not sign CSR Caused by: java.io.IOException: Could not obtain certificate (template=XenmobileTest). Reason: The format of the specified domain name is invalid. 0x800704bc (WIN32: 1212)

After configuring Client Certificate Authentication for XMS but you do not see an issued certificate on the Issuing Server 2016-08-18T12:49:32.19+0200 | | ERROR | http-nio-10443-exec-8 | EWSession | Exception on certificate issuer com.zenprise.zdm.pki.spi.IssuingServiceException: Could not sign C...

D-Link router firmware the back door that leads within the network domain name hijacking-vulnerability warning-the black bar safety net

This Backdoor can lead to a domain being hijacked, hijacking of domain names is available in the remote server control, with the back door of the firmware: DI7001-15.07. 15A1. trx DI7001W-15.07. 15A1. trx DI7002-15.07. 15A1. trx DI7002W-15.07. 15A1. trx DI7008W-14.10. 11A1. trx DI7100-15.07. 15A1...

MiniUPnP DNS Rebind Vulnerability

The remote host is running a version of MiniUPnP that is affected by an unspecified flaw that exists in the Domain Name System DNS related to the 'rebinding' interaction. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a specially crafted web page, to run a...

Hesiod has multiple vulnerabilities

Hesiod is a suite of DNS-based directory storage applications. Security bypass vulnerabilities and elevation of privilege vulnerabilities exist in Hesiod. An attacker could use these vulnerabilities to bypass security restrictions and gain unauthorized access or elevate privileges...

Tmdocs dns_dhcp SQL Injection Vulnerability

Tmdocs dnsdhcp is a web interface that allows management of DNSmasq a tool for configuring DNS and DHCP and static DHCP leases in Mikrotik routers. A SQL injection vulnerability exists in Tmdocs dnsdhcp. An attacker could use this vulnerability to take control of an application, access or modify...