[SECURITY] Fedora 25 Update: bind-9.10.5-2.P2.fc25

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

bind: Processing a response containing CNAME or DNAME with unusual order can crash resolver

A denial of service flaw was found in the way BIND handled a query response containing CNAME or DNAME resource records in an unusual order. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

bind: assertion failure while handling responses containing a DNAME answer

A denial of service flaw was found in the way BIND handled responses containing a DNAME answer. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

UTstarcom WA3002G4 Unauthenticated DNS Change Vulnerability

UTStarcom is a provider of broadband DSLAM and DSL SMS hardware, their products are used to manage DSL via PPPoE, PPPoA and other modes, and the BAS 1000 provides service management for both broadband and narrowband from a single platform. A security vulnerability exists in the UTstarcom WA3002G4...

ISC BIND Remote Denial of Service Vulnerability (CNVD-2017-11804)

ISC BIND is a set of open source software that implements the DNS protocol maintained by the Internet Systems Consortium ISC. A remote denial of service vulnerability exists in ISC BIND. A remote attacker could exploit this vulnerability to cause a denial of service...

D-Link DSL-2640U DNS Change Vulnerability

The D-Link DSL-2640U is a wireless router. An unauthenticated DNS change vulnerability exists in the D-Link DSL-2640U. An attacker can exploit the vulnerability to access sites and devices on vulnerable systems, redirecting to malicious sites...

Beetel BCM96338 Router DNS Change Vulnerability

The Beetel BCM96338 is a router. A DNS change vulnerability exists in the Beetel BCM96338 router. An attacker can exploit the vulnerability to access sites and devices on vulnerable systems, redirecting to malicious sites...

ALPINE-CVE-2017-9345

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dns.c by trying to detect self-referencing pointers...

UBUNTU-CVE-2017-9217

systemd-resolved through 233 allows remote attackers to cause a denial of service daemon crash via a crafted DNS response with an empty question section...

libevent: Stack-buffer overflow in the name_parse() function

A vulnerability was found in libevent with the parsing of DNS requests and replies. An attacker could send a forged DNS response to an application using libevent which could lead to reading data out of bounds on the heap, potentially disclosing a small amount of application memory...

Cisco ASA Software DNS Denial of Service Vulnerability

Cisco Adaptive Security Appliance ASA Software is the core operating system for the Cisco ASA family. A denial of service vulnerability in the DNS code of Cisco ASA Software can be exploited by an attacker to cause an affected device to reload or corrupt information in the device's local DNS cach...

libevent: Stack-buffer overflow in the name_parse() function

A vulnerability was found in libevent with the parsing of DNS requests and replies. An attacker could send a forged DNS response to an application using libevent which could lead to reading data out of bounds on the heap, potentially disclosing a small amount of application memory...

CVE-2017-6607

A vulnerability in the DNS code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause an affected device to reload or corrupt the information present in the device's local DNS cache. The vulnerability is due to a flaw in handling crafted DNS response messages. An attacker...

bind: Incorrect error handling causes assertion failure when using DNS64 with "break-dnssec yes;"

A denial of service flaw was found in the way BIND handled query requests when using DNS64 with "break-dnssec yes" option. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS request...

bind: Processing a response containing CNAME or DNAME with unusual order can crash resolver

A denial of service flaw was found in the way BIND handled a query response containing CNAME or DNAME resource records in an unusual order. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

libevent: Stack-buffer overflow in the name_parse() function

A vulnerability was found in libevent with the parsing of DNS requests and replies. An attacker could send a forged DNS response to an application using libevent which could lead to reading data out of bounds on the heap, potentially disclosing a small amount of application memory...

[SECURITY] Fedora 25 Update: bind99-9.9.9-4.P8.fc25

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP...

[SECURITY] Fedora 25 Update: bind-9.10.4-4.P8.fc25

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

bind: Processing a response containing CNAME or DNAME with unusual order can crash resolver

A denial of service flaw was found in the way BIND handled a query response containing CNAME or DNAME resource records in an unusual order. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

bind: Incorrect error handling causes assertion failure when using DNS64 with "break-dnssec yes;"

A denial of service flaw was found in the way BIND handled query requests when using DNS64 with "break-dnssec yes" option. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS request...