named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries

...

PT-2023-1302 · Isc +9 · Bind 9 +9

Name of the Vulnerable Software and Affected Versions: BIND 9 versions 9.16.0 through 9.16.36 BIND 9 versions 9.18.0 through 9.18.10 BIND 9 versions 9.19.0 through 9.19.8 BIND 9 versions 9.16.8-S1 through 9.16.36-S1 Description: The issue is related to the allocation of large amounts of memory by...

bind: DNS forwarders - cache poisoning vulnerability

A cache poisoning vulnerability was found in BIND when using forwarders. Bogus NS records supplied by the forwarders may be cached and used by name if it needs to recurse for any reason. This issue causes it to obtain and pass on potentially incorrect answers. This flaw allows a remote high...

The vulnerability of NSD and Unbound DNS servers lies in the improper handling of symbolic links before accessing a file. This allows attackers to cause service failures.

The vulnerability of NSD and Unbound DNS servers is related to the incorrect handling of symbolic links before accessing a file. Exploiting this vulnerability allows an attacker to cause service failures...

DEBIAN-CVE-2022-3204

A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The attack starts by querying a resolver for...

DEBIAN-CVE-2022-40188

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service CPU consumption because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets...

UBUNTU-CVE-2022-40188

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service CPU consumption because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets...

ISC BIND 9.16.14 < 9.16.33 / 9.16.14-S1 < 9.16.33-S1 / 9.18.0 < 9.18.7 / 9.19.0 < 9.19.5 Vulnerability (cve-2022-3080)

The version of ISC BIND installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the cve-2022-3080 advisory. - By sending specific queries to the resolver, an attacker can cause named to crash. CVE-2022-3080 Note that Nessus has not...

The vulnerability of the DNS BIND server, related to deficiencies in HTTP request processing, allows attackers to compromise the integrity of data.

The vulnerability of the DNS BIND server is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

PT-2022-3864 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows DNS Server component. This allows a remote attacker to execute arbitrary code on the...

CVE-2022-26823

Windows DNS Server Remote Code Execution Vulnerability...

golang: net: lookup functions may return invalid host names

A flaw was found in Go. The LookupCNAME, LookupSRV, LookupMX, LookupNS, and LookupAddr functions in the net package and methods on the Resolver type, may return arbitrary values retrieved from DNS, allowing injection of unexpected contents. The highest threat from this vulnerability is to integri...

Microsoft DNS Server 代码注入漏洞

Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft DNS Server. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for...

The vulnerability of the BIND DNS server component, which allows a perpetrator to cause a service failure

The vulnerability of the BIND DNS server component is related to the lack of use of the assert function. Exploiting this vulnerability allows a remote attacker to cause service failures...

Technitium DNS Server 安全漏洞

Technitium DNS Server is an open source authoritative and recursive DNS server from the Technitium team. It can be used to self-host DNS servers for privacy and security. A security vulnerability exists in Technitium DNS Server version 7.0 and earlier versions, which stems from a flaw in the...

TP-LINK TL-WR840N 安全漏洞

TP-LINK TL-WR840N is a wireless router. The TP-LINK TL-WR840N was found to contain a buffer overflow via DNS server parameter overflow. An attacker could exploit this vulnerability to cause program runtime failure, system downtime, reboot, and other consequences...

ISC BIND 9.18.0 < 9.18.1 Assertion Failure (CVE-2022-0667)

The version of ISC BIND installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-0667 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

ISC BIND 9.16.11 < 9.16.27 / 9.16.11-S1 < 9.16.27-S1 / 9.17.0 < 9.18.1 Vulnerability (CVE-2022-0396)

The version of ISC BIND installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-0396 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

USN-5332-2 bind9 vulnerability

USN-5332-1 fixed a vulnerability in Bind. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Xiang Li, Baojun Liu, Chaoyi Lu, and Changgen Zou discovered that Bind incorrectly handled certain bogus NS records when using forwarders. ...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. The vulnerabilities potentially enable a malicious person to launch attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root rights Remote code execution User rights...