Lame cache can be abused to severely degrade resolver performance

...

CVE-2021-0954

In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID:...

golang: net: lookup functions may return invalid host names

A flaw was found in Go. The LookupCNAME, LookupSRV, LookupMX, LookupNS, and LookupAddr functions in the net package and methods on the Resolver type, may return arbitrary values retrieved from DNS, allowing injection of unexpected contents. The highest threat from this vulnerability is to integri...

OESA-2021-1459 bind security update

Domain Name System DNS Server. Security Fixes: In BIND 9.3.0 - 9.11.35, 9.12.0 - 9.16.21, and versions 9.9.3-S1 - 9.11.35-S1 and 9.16.8-S1 - 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 - 9.17.18 of the BIND 9.17 development branch, exploitation of broken...

golang: net: lookup functions may return invalid host names

A flaw was found in Go. The LookupCNAME, LookupSRV, LookupMX, LookupNS, and LookupAddr functions in the net package and methods on the Resolver type, may return arbitrary values retrieved from DNS, allowing injection of unexpected contents. The highest threat from this vulnerability is to integri...

OPENSUSE-SU-2021:1502-1 Security update for bind

This update for bind fixes the following issues: - CVE-2021-25219: Fixed lame cache that could have been abused to severely degrade resolver performance bsc1192146. This update was imported from the SUSE:SLE-15:Update update project...

SUSE SLED15: bind / bind-chrootenv / bind-devel / bind-doc / bind-utils / etc (SUSE-SU-2021:3773-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3773-1 advisory. - CVE-2021-25219: Fixed lame cache that could have been abused to severely degrade resolver performance bsc1192146. Tenable has extracted the...

OPENSUSE-SU-2021:3773-1 Security update for bind

This update for bind fixes the following issues: - CVE-2021-25219: Fixed lame cache that could have been abused to severely degrade resolver performance bsc1192146...

SUSE-SU-2021:3773-1 Security update for bind

This update for bind fixes the following issues: - CVE-2021-25219: Fixed lame cache that could have been abused to severely degrade resolver performance bsc1192146...

New Side Channel Attacks Re-Enable Serious DNS Cache Poisoning Attacks

Researchers have demonstrated yet another variant of the SAD DNS cache poisoning attack that leaves about 38% of the domain name resolvers vulnerable, enabling attackers to redirect traffic originally destined to legitimate websites to a server under their control. "The attack allows an off-path...

CLSA-2021-1637070791 Fix of CVE: CVE-2021-25219

CVE-2021-25219: Fix resolver performance degradation via lame cache abuse...

Fix of CVE: CVE-2021-25219

CVE-2021-25219: Fix resolver performance degradation via lame cache abuse...

SUSE-SU-2021:3657-1 Security update for bind

This update for bind fixes the following issues: - CVE-2021-25219: Fixed lame cache that could have been abused to severely degrade resolver performance bsc1192146...

[SECURITY] Fedora 33 Update: bind-9.11.36-1.fc33

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Security Bulletin: A security vulnerability in Node.js pac-resolver module affects IBM Cloud Pak for Multicloud Management Managed Services

Summary A security vulnerability in Node.js pac-resolver module affects IBM Cloud Pak for Multicloud Management Managed Services. Vulnerability Details CVEID: CVE-2021-23406 DESCRIPTION: Node.js pac-resolver module could allow a remote attacker to execute arbitrary code on the system, caused by a...

golang: net: lookup functions may return invalid host names

A flaw was found in Go. The LookupCNAME, LookupSRV, LookupMX, LookupNS, and LookupAddr functions in the net package and methods on the Resolver type, may return arbitrary values retrieved from DNS, allowing injection of unexpected contents. The highest threat from this vulnerability is to integri...

Denial Of Service (DoS)

bind9 is vulnerable to denial of service. The vulnerability exists due to broken authoritative servers using a flaw in response processing that may cause degradation in BIND resolver performance...

Fix of CVE: CVE-2021-25219

CVE-2021-25219: Fix resolver performance degradation via lame cache abuse...

CLSA-2021-1635957830 Fixed CVE-2021-25219 in bind

CVE-2021-25219: Fix resolver performance degradation via lame cache abuse...

ISC BIND Denial of Service Vulnerability (CNVD-2023-25100)

ISC BIND is an open source software implementation of the DNS protocol from ISC, Inc. A denial-of-service vulnerability exists in BIND, which stems from an error in the corresponding processing of the product's authorization server. An attacker could exploit the vulnerability to cause a performan...