Lucene search
+L

216 matches found

OSV
OSV
•added 2015/07/29 2:59 p.m.•7 views

DEBIAN-CVE-2015-5477

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit via TKEY queries...

7.8CVSS6.8AI score0.91284EPSS
SaveExploits13References1
OSV
OSV
•added 2015/07/29 2:59 p.m.•13 views

CVE-2015-5477

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit via TKEY queries...

6.4AI score
SaveExploits0References43
Prion
Prion
•added 2015/07/29 2:59 p.m.•31 views

Authentication flaw

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit via TKEY queries...

7.8CVSS7AI score0.91284EPSS
SaveExploits13References42Affected Software1
CVE
CVE
•added 2015/07/29 2:00 p.m.•334 views

CVE-2015-5477

ISC BIND DNS servers (versions 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3) are vulnerable to a denial of service (DoS) attack. The root cause is the improper handling of invalid TKEY resource records , where a specially crafted DNS query can trigger a REQUIRE assertion failure and cause the ...

7.8CVSS7.2AI score0.91284EPSS
SaveIn wildExploits13References42Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/07/29 12:00 a.m.•5 views

CVE-2015-5477: Undefined Security Weakness

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit via TKEY queries...

7.8CVSS7AI score0.91284EPSS
SaveExploits13References2
Tenable Nessus
Tenable Nessus
•added 2015/07/29 12:00 a.m.•74 views

Ubuntu 14.04 LTS : Bind vulnerabilities (USN-2693-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2693-1 advisory. Jonathan Foote discovered that Bind incorrectly handled certain TKEY queries. A remote attacker could use this issue with a specially crafted packet to...

7.8CVSS7AI score0.91284EPSS
SaveExploits14References3
ArchLinux
ArchLinux
•added 2015/07/29 12:00 a.m.•68 views

bind: denial of service

A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named functioning as an authoritative DNS server or a DNS resolver exit unexpectedly with an assertion failure via a specially crafted DNS request packet leading to denia...

7.8CVSS2.4AI score0.91284EPSS
SaveExploits13References2
RedHat Linux
RedHat Linux
•added 2015/07/28 10:59 p.m.•12 views

bind: TKEY query handling flaw leading to denial of service

A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named functioning as an authoritative DNS server or a DNS resolver exit unexpectedly with an assertion failure via a specially crafted DNS request packet...

7.8CVSS6.8AI score0.91284EPSS
SaveExploits13References6
Slackware Linux
Slackware Linux
•added 2015/07/28 7:38 p.m.•47 views

[slackware-security] bind

New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/bind-9.9.7P2-i486-1slack14.1.txz: Upgraded. This update fixes a security issue where an error in the handling...

7.8CVSS7.9AI score0.91284EPSS
SaveExploits13
Debian
Debian
•added 2015/07/28 7:23 p.m.•28 views

[SECURITY] [DLA 285-1] bind9 security update

Package : bind9 Version : 1:9.7.3.dfsg-1squeeze16 CVE ID : CVE-2015-5477 Jonathan Foote discovered that the BIND DNS server does not properly handle TKEY queries. A remote attacker can take advantage of this flaw to mount a denial of service via a specially crafted query triggering an assertion...

7.8CVSS7.5AI score0.91284EPSS
SaveExploits13
OSV
OSV
•added 2015/07/28 12:00 a.m.•33 views

DLA-285-1 bind9 - security update

Bulletin has no description...

7.8CVSS7.5AI score0.91284EPSS
SaveExploits13
OSV
OSV
•added 2015/07/28 12:00 a.m.•12 views

UBUNTU-CVE-2015-5477

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit via TKEY queries...

7.8CVSS7AI score0.91284EPSS
SaveExploits13References4
OSV
OSV
•added 2015/07/28 12:00 a.m.•30 views

DSA-3319-1 bind9 - security update

Bulletin has no description...

7.8CVSS7.5AI score0.91284EPSS
SaveExploits13
Amazon
Amazon
•added 2015/07/28 12:00 a.m.•40 views

Critical: bind

Issue Overview: As reported upstream https://kb.isc.org/article/AA-01272/0, an error in the handling of TKEY queries can be exploited by an attacker for use as a denial-of-service vector, as a constructed packet can use the defect to trigger a REQUIRE assertion failure, causing BIND to exit...

7.8CVSS7.4AI score0.91284EPSS
SaveExploits13
Metasploit
Metasploit
•added 2015/07/28 12:00 a.m.•310 views

BIND TKEY Query Denial of Service

This module sends a malformed TKEY query, which exploits an error in handling TKEY queries on affected BIND9 'named' DNS servers. As a result, a vulnerable named server will exit with a REQUIRE assertion failure. This condition can be exploited in versions of BIND between BIND 9.1.0 through 9.8.x...

7.8CVSS6.9AI score0.91284EPSS
SaveExploits13
FreeBSD
FreeBSD
•added 2015/07/21 12:00 a.m.•34 views

bind -- denial of service vulnerability

ISC reports: An error in the handling of TKEY queries can be exploited by an attacker for use as a denial-of-service vector, as a constructed packet can use the defect to trigger a REQUIRE assertion failure, causing BIND to exit...

7.8CVSS7.7AI score0.91284EPSS
SaveExploits13References1
Rows per page
Query Builder