2378 matches found
[SECURITY] Fedora 27 Update: unbound-1.6.8-6.fc27
Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...
Fedora Update for unbound FEDORA-2018-a10a19e06a
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 26 : unbound (2018-a10a19e06a)
Security fix for CVE-2017-15105 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...
[SECURITY] Fedora 26 Update: unbound-1.6.8-1.fc26
Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...
Debian DLA-1264-1 : unbound security update
Ralph Dolmans and Karst Koymans found a flaw in the way unbound validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence NXDOMAIN answer of an existing wildcard record, or trick unbound into accepting a NODATA proof. For mo...
Fedora 27 : unbound (2018-69316c5b7a)
Security fix for CVE-2017-15105 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...
Fedora Update for unbound FEDORA-2018-69316c5b7a
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 27 Update: unbound-1.6.8-1.fc27
Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...
[SECURITY] [DLA 1264-1] unbound security update
Package : unbound Version : 1.4.17-3+deb7u3 CVE ID : CVE-2017-15105 Debian Bug : 887733 Ralph Dolmans and Karst Koymans found a flaw in the way unbound validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence NXDOMAIN answe...
Debian: Security Advisory (DLA-1264-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-1264-1 unbound - security update
Bulletin has no description...
Unbound < 1.6.3 use-caps-for-id Option qname Handling Denial of Service
According to its self-reported version number, the remote Unbound DNS resolver is affected by a denial of service vulnerability when handling qnames in responses with the use-caps-for-id option enabled. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid106382;...
Unbound < 1.4.3 'sock_list' Structure Allocation Remote Denial Of Service Vulnerability (CVE-2010-0969)
According to its self-reported version number, the remote Unbound DNS resolver is affected by a remote denial of service vulnerability when allocating 'socklist' structures. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid106380; scriptversion"1.4"; scriptcvsdate"Date...
Unbound < 1.6.8 Wildcard Synthesized NSEC Records Handling Remote Validation Weakness
According to its self-reported version number, the remote Unbound DNS resolver is affected by a validation weakness when handling wildcard synthesized NSEC records. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid106384; scriptversion"1.5"; scriptcvsdate"Date:...
Unbound < 1.5.9 daemon/remote.c Diffie-Hellman Key Exchange Value Small Subgroup Confinement Attack Vulnerability
According to its self-reported version number, the remote Unbound DNS resolver contains a flaw in the handling of Diffie-Hellman key exchange values that can allow a remote attacker to perform a small subgroup confinement attack. C Tenable Network Security, Inc. include"compat.inc"; if descriptio...
Unbound < 1.6.4 parse_edns_options Heap Buffer Overflow
According to its self-reported version number, the remote Unbound DNS resolver is affected by a heap buffer overflow in parseednsoptions. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid106383; scriptversion"1.5"; scriptcvsdate"Date: 2018/11/15 20:50:21";...
Unbound < 1.3.4 NSEC3 Signature Verification DNS Spoofing Vulnerability (CVE-2009-3602)
According to its self-reported version number, the remote Unbound DNS resolver is affected by a remote DNS spoofing vulnerability when verifying NSEC3 signatures. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid106379; scriptversion"1.6";...
Unbound Security Bypass Vulnerability
Unbound is a C-based open source recursive DNS server software maintained by NLnet Labs in the Netherlands. A security vulnerability exists in Unbound versions prior to 1.6.8, which stems from the program failing to properly validate wildcard records. An attacker could exploit this vulnerability ...
Unbound DNS Resolver < 1.6.8 DoS Vulnerability
Unbound DNS Resolver is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Design/Logic Flaw
A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence NXDOMAIN answer of an existing wildcard record, or trick unbound into accepting a NODATA proof...