CVE-2005-0034

An "incorrect assumption" in the authvalidated validator function in BIND 9.3.0, when DNSSEC is enabled, allows remote attackers to cause a denial of service named server exit via crafted DNS packets that cause an internal consistency test self-check to fail...

[SA14008] BIND Validator Denial of Service Vulnerability

TITLE: BIND Validator Denial of Service Vulnerability SECUNIA ADVISORY ID: SA14008 VERIFY ADVISORY: http://secunia.com/advisories/14008/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: ISC BIND 9.3.x http://secunia.com/product/4298/ DESCRIPTION: A vulnerability has been...

[SA14009] BIND "q_usedns" Array Buffer Overflow Vulnerability

TITLE: BIND "qusedns" Array Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA14009 VERIFY ADVISORY: http://secunia.com/advisories/14009/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: ISC BIND 8.x.x http://secunia.com/product/76/ DESCRIPTION: A vulnerability has been...

ISC BIND < 9.3.1 Validator Self Checking Remote DoS

The remote BIND server, according to its version number, has a flaw in the way 'authvalidator' is implemented. Provided DNSSEC has been enabled in the remote name server, an attacker may be able to launch a denial of service attack against the remote service. C Tenable Network Security, Inc...

BIND 8.4.4 and 8.4.5 vulnerable to buffer overflow in q_usedns

Overview A vulnerability in the BIND name server could allow a remote attacker to cause a denial of service against an affected system. Description The Berkeley Internet Name Domain BIND is a popular Domain Name System DNS implementation from Internet Systems Consortium ISC. A buffer overflow err...

BIND 9.3.0 vulnerable to denial of service in validator code

Overview A vulnerability in the BIND name server could allow a remote attacker to cause a denial of service against an affected system. Description The Berkeley Internet Name Domain BIND is a popular Domain Name System DNS implementation from Internet Systems Consortium ISC. BIND supports the DNS...

Debian DSA-409-1 : bind - denial of service

A vulnerability was discovered in BIND, a domain name server, whereby a malicious name server could return authoritative negative responses with a large TTL time-to-live value, thereby rendering a domain name unreachable. A successful attack would require that a vulnerable BIND instance submit a...

CVE-2002-1221

BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service crash via SIG RR elements with invalid expiry times, which are removed from the internal BIND database and later cause a null dereference...

CVE-2002-1221

BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service crash via SIG RR elements with invalid expiry times, which are removed from the internal BIND database and later cause a null dereference...

CVE-2002-1220

BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service termination due to assertion failure via a request for a subdomain that does not exist, with an OPT resource record with a large UDP payload size...

ISC BIND < 4.9.7 Inverse-Query Remote Overflow (deprecated)

Binary data 1007.prm...

ISC BIND 8 Compressed ZXFR Name Service Query DoS (deprecated)

Binary data 1013.prm...

ISC BIND < 8.1.2 Inverse-Query Remote Overflow (deprecated)

Binary data 1015.prm...

DSA-409 bind - denial of service

Bulletin has no description...

ISC BIND < 8.3.7 / 8.4.3 Negative Record Cache Poisoning

The remote BIND server, according to its version number, is vulnerable to a negative cache poison bug that may allow an attacker to disable this service remotely. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11932; scriptversion"1.19"; scriptcvsdate"Date: 2018/06/2...

CVE-2002-2211

BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record RR combined with spoofed responses, which increases the possibility of...

CVE-2002-1220

BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service termination due to assertion failure via a request for a subdomain that does not exist, with an OPT resource record with a large UDP payload size...

Cached malformed SIG record buffer overflow

Overview A vulnerability in BIND allows remote attackers to execute code with the privileges of the process running named. This vulnerability is resolved in BIND versions 4.9.11, 8.2.7, 8.3.4, and BIND 9. Description A remotely exploitable buffer overflow exists in named. An attacker using...

ISC BIND 8 fails to properly dereference cache SIG RR elements with invalid expiry times from the internal database

Overview A remotely exploitable denial-of-service vulnerability exists in BIND. Description A remotely exploitable denial-of-service vulnerability exists in BIND 8.2 - 8.2.6 and BIND 8.3.0 - 8.3.3. ISC's description of this vulnerability states:It is possible to de-reference a NULL pointer for...

Overly large OPT record assertion

Overview A remotely exploitable denial-of-service vulnerability exists in BIND. Based on recent reports, we believe this vulnerability is being actively exploited. Description A remotely exploitable denial-of-service vulnerability exists in BIND 8.3.0 - 8.3.3. ISC's description of this...