[SECURITY] Fedora 21 Update: pdns-3.4.6-1.fc21

The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...

PowerDNS Authoritative Server Message Handling Target Service Crash Vulnerability

PowerDNS Authoritative Server is a high performance authoritative DNS name server. A security vulnerability in the PowerDNS Authoritative Server DNS resolution code allows remote attackers to exploit the vulnerability to send special DNS messages that can crash the target service...

bind: TKEY query handling flaw leading to denial of service

A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named functioning as an authoritative DNS server or a DNS resolver exit unexpectedly with an assertion failure via a specially crafted DNS request packet...

[slackware-security] bind

New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/bind-9.9.7P2-i486-1slack14.1.txz: Upgraded. This update fixes a security issue where an error in the handling...

openSUSE Security Update : pdns / pdns-recursor (openSUSE-2015-505)

pdns, pdns-recursor were updated to fix two security issues. These security issues were fixed : - CVE-2015-1868: The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative Auth Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before...

Tunneling C&C Over DNS: dnscat2

This tool is designed to create a command-and-control C&C channel over the DNS protocol, which is an effective tunnel out of almost every network. dnscat2 comes in two parts: the client and the server. The client is designed to be run on a compromised machine. It’s written in C and has the minimu...

DEBIAN-CVE-2015-1868

The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative Auth Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service CPU consumption or crash via a request with a name that...

UBUNTU-CVE-2015-1868

The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative Auth Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service CPU consumption or crash via a request with a name that...

CVE-2015-1868

CVE-2015-1868 concerns PowerDNS components (Recursor and Authoritative Server) where the vulnerability arises from the label decompression logic. A request whose domain name refers to itself can trigger excessive CPU usage or crash the server, enabling a remote DoS. Affected: PowerDNS Recursor 3....

[SECURITY] Fedora 22 Update: pdns-recursor-3.7.2-1.fc22

PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...

PowerDNS Recursor and Authoritative Server Label Denial of Service Vulnerability

PowerDNS Recursor is a domain name resolution server.PowerDNS Authoritative Server is a DNS server. The PowerDNS Recursor and Authoritative Server programs process compressed labels incorrectly, allowing an attacker to exploit a vulnerability that could trigger recursive loops and consume CPU...

[SECURITY] Fedora 22 Update: knot-1.6.3-1.fc22

Knot DNS is a high-performance authoritative DNS server implementation...

MGASA-2015-0092 Updated maradns packages fix a security vulnerability

maradns versions prior to 1.4.16 are vulnerable to a DoS-vulnerability through which a malicious authorative DNS-server can cause an infinite chain of referrals. For further details on the vulnerability, see references...

[SECURITY] Fedora 21 Update: knot-1.5.2-1.fc21

Knot DNS is a high-performance authoritative DNS server implementation...

[SECURITY] Fedora 19 Update: knot-1.4.5-1.fc19

Knot DNS is a high-performance authoritative DNS server implementation...

bind: named crash when handling malformed NSEC3-signed zones

A denial of service flaw was found in the way BIND handled queries for NSEC3-signed zones. A remote attacker could use this flaw against an authoritative name server that served NCES3-signed zones by sending a specially crafted query, which, when processed, would cause named to crash...

Mandriva Linux Security Advisory : bind (MDVSA-2014:002)

A vulnerability has been discovered and corrected in ISC BIND : The queryfindclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service INSIST assertion...

DEBIAN-CVE-2014-0591

The queryfindclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service INSIST assertion failure and daemon exit via a crafted DNS query to an authoritativ...

Design/Logic Flaw

The queryfindclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service INSIST assertion failure and daemon exit via a crafted DNS query to an authoritativ...

CVE-2014-0591

The queryfindclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service INSIST assertion failure and daemon exit via a crafted DNS query to an authoritativ...