12640 matches found
CVE-2017-3135
A denial of service flaw was found in the way BIND handled query responses when both DNS64 and RPZ were used. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure or a null pointer dereference via a specially crafted DNS response. Mitigation While it is...
CVE-2017-3135
Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 - 9.9.9-S7, 9.9.3 - 9.9.9-P5, 9.9.10b1,...
[ASA-201702-8] bind: denial of service
Arch Linux Security Advisory ASA-201702-8 ========================================= Severity: High Date : 2017-02-09 CVE-ID : CVE-2017-3135 Package : bind Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-169 Summary ======= The package bind before version 9.11.0.P3-...
Security fix for the ALT Linux 8 package bind version 9.10.4-alt2
Feb. 8, 2017 Dmitry V. Levin 9.10.4-alt2 - 9.10.4-P5 - 9.10.4-P6 fixes CVE-2017-3135...
ISC Releases Security Updates for BIND
The Internet Systems Consortium ISC has released updates that address a vulnerability in BIND. Exploitation of this vulnerability may allow a remote attacker to cause a denial-of-service condition. Available updates include: BIND 9 version 9.9.9-P6 BIND 9 version 9.10.4-P6 BIND 9 version 9.11.0-P...
Security fix for the ALT Linux 9 package bind version 9.10.4-alt2
Feb. 8, 2017 Dmitry V. Levin 9.10.4-alt2 - 9.10.4-P5 - 9.10.4-P6 fixes CVE-2017-3135...
CVE-2016-2403
Symfony before 2.8.6 and 3.x before 3.0.6 allows remote attackers to bypass authentication by logging in with an empty password and valid username, which triggers an unauthenticated bind...
CVE-2016-2403
Symfony before 2.8.6 and 3.x before 3.0.6 allows remote attackers to bypass authentication by logging in with an empty password and valid username, which triggers an unauthenticated bind...
USN-3172-1: Bind vulnerabilities | Cloud Foundry
Severity Medium Vendor Ubuntu Versions Affected Ubuntu 14.04 LTS Description It was discovered that Bind incorrectly handled certain malformed responses to an ANY query. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. CVE-2016-9131 It was...
ISC BIND EDNS Option Processing Denial of Service Vulnerability - Windows
ISC BIND is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; ifdescription...
ISC BIND EDNS Option Processing Denial of Service Vulnerability - Linux
ISC BIND is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; ifdescription...
ISC BIND TKEY Query Response Assertion Failure Denial of Service (CVE-2016-9131)
A denial-of-service vulnerability has been reported in ISC BIND. The vulnerability is due to a defect that can cause named service to exit with an assertion failure while processing a crafted DNS response packet. A remote, unauthenticated attacker could exploit this vulnerability by providing a...
ISC BIND 9.x < 9.9.9-P3 / 9.9.9-S5 / 9.10.4-P3 / 9.11.0-P1 DoS
Binary data 9875.prm...
ISC BIND 9.x < 9.9.9-P4 / 9.9.9-S6 / 9.10.4-P4 / 9.11.0-P1 DoS
Binary data 9877.prm...
ISC BIND 9.x < 9.8.5 / 9.9.x < 9.9.3 Multiple Vulnerabilities
Binary data 9876.prm...
ISC BIND 9.10.x < 9.10.3-P4 DoS
Binary data 9873.prm...
ISC BIND 9.10.x < 9.10.3-P3 DoS
Binary data 9870.prm...
ISC BIND 9.x < 9.9.8-S5 / 9.9.9-S3 DoS
Binary data 9871.prm...