44 matches found
CVE-2010-3614
named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, which might allow remote attackers to cause a denial of service DNSSEC validati...
ISC BIND DNSSEC验证远程拒绝服务漏洞
ISC BIND是一个应用非常广泛的DNS协议的实现,由ISC负责维护,具体的开发由Nominumwww.nominum.com公司来完成。 ISC BIND在处理用户请求时存在漏洞,远程攻击者可能利用此漏洞导致BIND拒绝服务。 在验证对ANY类型请求的响应时如果请求在回答会话中返回了多个RRset的话就可能触发异常处理,导致BIND拒绝服务。仅在用户通过指定可信任密钥在named.conf中启用了dnssec验证的情况下才会出现这个漏洞。 ISC BIND 9.5.0a1 ISC BIND 9.4.x ISC BIND 9.3.x ISC BIND 9.2.x ISC BIND...
bind DNS server DoS
assert on multiple RRset records, crash on multiple recursive queries...
FreeBSD-SA-06:20.bind
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:20.bind Security Advisory The FreeBSD Project Topic: Denial of Service in named8 Category: contrib Module: bind Announced: 2006-09-06 Credits: The Measurement...