ISC BIND 'RRSIG' Record Type Negative Cache Remote Denial of Service Vulnerability

ISC BIND is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; ifdescription...

bind: failure to clear existing RRSIG records when a NO DATA is negatively cached could DoS named

named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service daemon crash via a query for...

bind: failure to clear existing RRSIG records when a NO DATA is negatively cached could DoS named

named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service daemon crash via a query for...

[SECURITY] [DSA-2130-1] New BIND packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2130-1 [email protected] http://www.debian.org/security/ Florian Weimer December 10, 2010 http://www.debian.org/security/faq -...

Ubuntu Update for bind9 vulnerabilities USN-1025-1

Ubuntu Update for Linux kernel vulnerabilities USN-1025-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10251.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for bind9 vulnerabilities USN-1025-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

CVE-2010-3613

named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service daemon crash via a query for...

ISC BIND 9 9.4-ESV < 9.4-ESV-R4, 9.6.2 < 9.6.2-P3, 9.6-ESV < 9.6-ESV-R3, 9.7.x < 9.7.2-P3 Multiple Vulnerabilities

According to its self-reported version number, the remote installation of BIND is affected by multiple vulnerabilities : - Failure to clear existing RRSIG records when a NO DATA is negatively cached could cause subsequent lookups to crash named. CVE-2010-3613 - Named, when acting as a DNSSEC...

ISC BIND 9.4-ESV < 9.4-ESV-R4 / 9.6.2 < 9.6.2-P3, 9.6-ESV < 9.6-ESV-R3 / 9.7.x < 9.7.2-P3 Multiple Vulnerabilities

Binary data 5718.prm...

CVE-2010-0213

BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation DLV, allows remote attackers to cause a denial of service infinite loop via a query for an RRSIG record whose answer is not in the cache, which causes BI...

CVE-2010-0213

BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation DLV, allows remote attackers to cause a denial of service infinite loop via a query for an RRSIG record whose answer is not in the cache, which causes BI...

CVE-2010-0213

BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation DLV, allows remote attackers to cause a denial of service infinite loop via a query for an RRSIG record whose answer is not in the cache, which causes BI...

CVE-2010-0213

CVE-2010-0213 affects BIND 9.7.1 and 9.7.1-P1 when a recursive validating server uses a statically configured trust anchor or DNSSEC Lookaside Validation (DLV). The flaw allows remote attackers to trigger a denial of service (infinite loop) by issuing a query for an RRSIG record whose answer is n...

Fedora 13 : bind-9.7.1-2.P2.fc13 (2010-11344)

RRSIG query handling bug in BIND 9.7.1 CVE-2010-0213 http://www.isc.org/software/bind/advisories/CVE-2010-0213 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

ISC BIND 9 'RRSIG' Record Type Remote DoS

According to its version number, the remote installation of BIND suffers from a denial of service vulnerability. The vulnerability exists due to an error when handling requests for the 'RRSIG' record type where the answer is not already in the cache. This can lead to BIND entering an infinite loo...

ISC BIND 'RRSIG' Record Type Remote DoS Vulnerability

ISC BIND is prone to a remote denial-of-service vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind";...

ISC BIND 9.7.1 < 9.7.1 P2 'RRSIG' Record Type Remote DoS

Binary data 5601.prm...

ISC BIND 9 RRSIG记录类型远程拒绝服务漏洞

BUGTRAQ ID: 41730 CVE ID: CVE-2010-0213 BIND是一个应用非常广泛的DNS协议的实现，由ISC负责维护，具体的开发由Nominum公司完成。 如果用户向运行BIND的验证递归服务器提交了RRSIG类型记录的查询请求，且服务器静态的或通过DLV配置了一个或多个信任锚，则在缓存中不存在应答的情况下，服务器就会陷入为包含有所查询名称区域的权威服务器反复生成RRSIG查询的循环。在正常操作中很少会出现这种情况，因为在启用了DNSSEC 且存在记录的情况下，RRSIG已经包含在了对所涵盖RR类型查询的响应中。 ISC BIND 9.7.1-P1 ISC BI...