Updated bind packages fix security vulnerabilities

The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory,...

Advisory ROSA-SA-2023-2279

Software: bind 9.11.4 OS: rosa-server79 packageevrstring: bind-9.11.4-26.P2.res7.15.x8664.rpm CVE-ID: CVE-2023-2828 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: Each named instance configured to act as a recursive resolver maintains a cache database containing responses to queries it has recently sent ...

Squid DoS Vulnerability (GHSA-72c2-c3wm-8qxc, SQUID-2024:1)

Squid is prone to a denial of service DoS vulnerability in the HTTP Chunked Decoding. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Libx11: stack exhaustion from infinite recursion in putsubimage()

...

Rocky Linux 9 : bind (RLSA-2023:5689)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:5689 advisory. - The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by th...

The vulnerability of the Poppler library for rendering PDF files, related to uncontrolled recursion, allows attackers to trigger service interruptions.

The vulnerability of the Poppler library for rendering PDF files is related to uncontrolled recursion. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service interruptions...

The vulnerability of the `FoFiType1C::convertToType1` function in the Poppler PDF rendering library allows a attacker to cause a service failure.

The vulnerability of the FoFiType1C::convertToType1 function in the Poppler PDF rendering library is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

bind: Fix of CVE-2023-3341

CVE-2023-3341: Limit iscccccfromwire recursion depth...

CLSA-2023-1697136232 bind: Fix of CVE-2023-3341

CVE-2023-3341: Limit iscccccfromwire recursion depth...

CLSA-2023-1697135570 bind: Fix of CVE-2023-3341

CVE-2023-3341: Limit iscccccfromwire recursion depth...

CLSA-2023-1697135138 bind: Fix of CVE-2023-3341

Limit iscccccfromwire recursion depth CVE-2023-3341...

CLSA-2023-1697134824 bind: Fix of CVE-2023-3341

CVE-2023-3341: Limit iscccccfromwire recursion depth...

CLSA-2023-1697134618 bind: Fix of CVE-2023-3341

CVE-2023-3341: Limit iscccccfromwire recursion depth...

CLSA-2023-1697134400 Fix CVE(s): CVE-2023-3341

SECURITY UPDATE: A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly - debian/patches/CVE-2023-3341.patch: Named and rndc do not need a lot of recursion so the depth is set to 10. - CVE-2023-3341...

bind: stack exhaustion in control channel code may lead to DoS

A flaw was found in the Bind package. The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size. Depending on the environment, this may cause the packet-parsing code...

Oracle Linux 7 : bind (ELSA-2023-5691)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-5691 advisory. 32:9.11.4-26.P2.15 - Limit the amount of recursion possible in control channel CVE-2023-3341 Tenable has extracted the preceding description block directly from...

Fedora 37 : bind / bind-dyndb-ldap (2023-87502c4a93)

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-87502c4a93 advisory. BIND 9.18.19 Security Fixes - Previously, sending a specially crafted message over the control channel could cause the packet- parsing code to run o...

Denial Of Service (DoS)

libpoppler.so is vulnerable to Denial of Service DoS. An infinite recursion in the Catalog::findDestInTree function allows an attacker to exploit this vulnerability by crafting a malicious PDF file that will cause the library to crash...

CVE-2023-43786 Libx11: stack exhaustion from infinite recursion in putsubimage()

A vulnerability was found in libX11 due to an infinite loop within the PutSubImage function. This flaw allows a local user to consume all available system resources and cause a denial of service condition...

bind: stack exhaustion in control channel code may lead to DoS

A flaw was found in the Bind package. The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size. Depending on the environment, this may cause the packet-parsing code...