162 matches found
USN-3259-1: Bind vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description It was discovered that the resolver in Bind made incorrect assumptions about ordering when processing responses containing a CNAME or DNAME. An attacker could use this cause a denial of service...
SUSE-SU-2017:0998-1 Security update for bind
This update for bind fixes the following issues: CVE-2017-3137 bsc1033467: Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could have been exploited to cause a denial of service of a bind server performing recursion...
Juniper Networks Junos OS Multiple BIND Vulnerabilities (JSA10785)
Junos OS is prone to multiple denial of service vulnerabilities in ISC BIND named. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
SUSE-SU-2017:0111-1 Security update for bind
This update for bind fixes the following issues: - Fix a potential assertion failure that could have been triggered by a malformed response to an ANY query, thereby facilitating a denial-of-service attack. CVE-2016-9131, bsc1018700, bsc1018699 - Fix a potential assertion failure that could have...
BIND -- multiple vulnerabilities
ISC reports: A malformed query response received by a recursive server in response to a query of RTYPE ANY could trigger an assertion failure while named is attempting to add the RRs in the query response to the cache. Depending on the type of query and the EDNS options in the query they receive,...
MGASA-2016-0332 Updated bind packages fix security vulnerability
The lwresd component in BIND which is not enabled by default could crash while processing an overlong request name. This could lead to a denial of service CVE-2016-2775. A crafted query could crash the BIND name server daemon, leading to a denial of service. All server roles authoritative,...
Ubuntu 14.04 LTS : Bind vulnerabilities (USN-2925-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2925-1 advisory. It was discovered that Bind incorrectly handled input received by the rndc control channel. A remote attacker could possibly use this issue to cause Bind...
SOL17450 - BIND vulnerabilities CVE-1999-0024 and CVE-2006-0987
Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5 critical issue...
ISC BIND <= 8.2.2,IRIX <= 6.5.17,Solaris 7.0 (NXT Overflow & Denial of Service) Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/788/info There are several vulnerabilities in recent BIND packages pre 8.2.2. The first is a buffer overflow condition which is a result of BIND improperly validating NXT records. The consequence of this being exploited i...
USN-1139-1: Bind vulnerabilities
It was discovered that Bind incorrectly handled certain bad signatures if multiple trust anchors existed for a single zone. A remote attacker could use this flaw to cause Bind to stop responding, resulting in a denial of service. This issue only affected Ubuntu 8.04 LTS and 10.04 LTS. CVE-2010-37...
RedHat Update for bind RHSA-2010:0976-01
Check for the Version of bind OpenVAS Vulnerability Test RedHat Update for bind RHSA-2010:0976-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
[USN-1025-1] Bind vulnerabilities
=========================================================== Ubuntu Security Notice USN-1025-1 December 01, 2010 bind9 vulnerabilities CVE-2010-3613, CVE-2010-3614 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS...
rPSA-2010-0018-1 bind bind-utils caching-nameserver
rPath Security Advisory: 2010-0018-1 Published: 2010-03-15 Products: rPath Appliance Platform Linux Service 1 rPath Appliance Platform Linux Service 2 rPath Linux 1 rPath Linux 2 Rating: Severe Exposure Level Classification: Remote User Deterministic Vulnerability Updated Versions:...
CVE-2008-1447
The DNS protocol, as implemented in 1 BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; 2 Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referral...
CVE-2006-4095
BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service crash via certain SIG queries, which cause an assertion failure when multiple RRsets are returned...
HP-UX PHNE_31726 : HP-UX Running BIND v920, Remote Denial of Service (DoS) (HPSBUX00290 SSRT3622 rev.5)
s700800 11.23 Bind 9.2.0 components : 1. Certain ASN.1 encodings that are rejected as invalid by the parser can trigger a bug in the deallocation of the corresponding data structure, corrupting the stack. This can be used as a denial of service attack. It is currently unknown whether this can be...
HP-UX PHNE_23274 : HP-UX running BIND, Remote Denial of Service (DoS) (HPSBUX00144 SSRT071378 rev.2)
s700800 11.00 Bind 4.9.7 components : The CERT advisories CA-2001-02 and CA-2000-20 detailed several BIND vulnerabilities including buffer overflows, input validation error, and disclosure environment variables and denial of service. See: CERT/CC CA-2001-02 and CERT/CC CA-2000-20 . The Internet...
HP-UX PHNE_22919 : HP-UX running BIND, Remote Denial of Service (DoS) (HPSBUX00144 SSRT071378 rev.2)
s700800 11.04 VVOS Bind 4.9.7 components : The CERT advisories CA-2001-02 and CA-2000-20 detailed several BIND vulnerabilities including buffer overflows, input validation error, and disclosure environment variables and denial of service. See: CERT/CC CA-2001-02 and CERT/CC CA-2000-20 . The...
Debian DSA-196-1 : bind - several vulnerabilities
Bind version 9, the bind9 package, is not affected by these problems. ISS X-Force has discovered several serious vulnerabilities in the Berkeley Internet Name Domain Server BIND. BIND is the most common implementation of the DNS Domain Name Service protocol, which is used on the vast majority of...