Lucene search
K

11946 matches found

Tenable Nessus
Tenable Nessus
added 2023/10/03 12:0 a.m.38 views

Amazon Linux 2023 : bind, bind-chroot, bind-devel (ALAS2023-2023-372)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-372 advisory. The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending o...

7.5CVSS6.8AI score0.02626EPSS
Exploits0References4
Amazon
Amazon
added 2023/10/03 12:0 a.m.15 views

Important: bind

Issue Overview: The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of availab...

7.5CVSS7AI score0.02626EPSS
Exploits0
Amazon
Amazon
added 2023/10/03 12:0 a.m.39 views

Important: bind

Issue Overview: The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of availab...

7.5CVSS7.1AI score0.02626EPSS
Exploits0
OpenVAS
OpenVAS
added 2023/10/03 12:0 a.m.30 views

SUSE: Security Advisory (SUSE-SU-2023:3934-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.8AI score0.02626EPSS
Exploits0References5
Veracode
Veracode
added 2023/10/02 5:30 p.m.18 views

Denial Of Service (DoS)

bind is vulnerable to Denial of Service DoS. The vulnerability exists due to a flaw in the networking code handling DNS-over-TLS queries due to an assertion failure causing an application crash...

7.5CVSS6.9AI score0.0215EPSS
Exploits0References10Affected Software2
Veracode
Veracode
added 2023/10/02 4:7 p.m.37 views

Denial Of Service (DoS)

bind is vulnerable to Denial of Service DoS. An attacker could exploit this vulnerability by sending a malicious DNS packet to a vulnerable named server. Once the vulnerability is exploited, the attacker could take control of the server and steal data, install malware, or disrupt service...

7.5CVSS6.8AI score0.02626EPSS
Exploits0References13Affected Software2
OSV
OSV
added 2023/10/02 10:4 a.m.14 views

SUSE-SU-2023:3934-1 Security update for bind

This update for bind fixes the following issues: Security fixes: - CVE-2023-3341: Fixed stack exhaustion flaw in control channel code may cause named to terminate unexpectedly bsc1215472. Other fixes: - Add dnstap support jscPED-4853, jscPED-4852, bsc1213748...

7.5CVSS7.5AI score0.02626EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2023/10/01 12:0 a.m.32 views

Fedora: Security Advisory for bind-dyndb-ldap (FEDORA-2023-a2621f58a9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8AI score0.02626EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2023/10/01 12:0 a.m.31 views

Fedora: Security Advisory for bind (FEDORA-2023-a2621f58a9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8AI score0.02626EPSS
Exploits0References2
F5 Networks
F5 Networks
added 2023/09/28 6:59 p.m.28 views

K000137038: BIND vulnerability CVE-2023-4236

Security Advisory Description A flaw in the networking code handling DNS-over-TLS queries may cause named to terminate unexpectedly due to an assertion failure. This happens when internal data structures are incorrectly reused under significant DNS-over-TLS query load. This issue affects BIND 9...

7.5CVSS8.2AI score0.0215EPSS
Exploits0Affected Software1
Fedora
Fedora
added 2023/09/28 1:37 a.m.42 views

[SECURITY] Fedora 38 Update: bind-dyndb-ldap-11.10-21.fc38

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

7.5CVSS7AI score0.02626EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/09/28 12:0 a.m.50 views

Fedora 38 : bind / bind-dyndb-ldap (2023-a2621f58a9)

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-a2621f58a9 advisory. BIND 9.18.19 Security Fixes - Previously, sending a specially crafted message over the control channel could cause the packet- parsing code to run o...

7.5CVSS6.9AI score0.02626EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2023/09/28 12:0 a.m.33 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : bind (SUSE-SU-2023:3821-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3821-1 advisory. - The code that processes control channel messages sent to named calls certain functions recursively duri...

7.5CVSS6.9AI score0.02626EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2023/09/28 12:0 a.m.28 views

SUSE SLES15 / openSUSE 15 Security Update : bind (SUSE-SU-2023:3805-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3805-1 advisory. - The code that processes control channel messages sent to named calls certain functions recursively during packet parsing...

7.5CVSS6.9AI score0.02626EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2023/09/28 12:0 a.m.27 views

SUSE: Security Advisory (SUSE-SU-2023:3805-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.8AI score0.02626EPSS
Exploits0References4
CBLMariner
CBLMariner
added 2023/09/27 6:2 p.m.23 views

CVE-2022-3924 affecting package bind for versions less than 9.16.37-2

CVE-2022-3924 affecting package bind for versions less than 9.16.37-2. An upgraded version of the package is available that resolves this issue...

7.5CVSS7.8AI score0.174EPSS
Exploits0
CBLMariner
CBLMariner
added 2023/09/27 6:2 p.m.19 views

CVE-2022-3736 affecting package bind for versions less than 9.16.37-2

CVE-2022-3736 affecting package bind for versions less than 9.16.37-2. An upgraded version of the package is available that resolves this issue...

7.5CVSS7.8AI score0.50451EPSS
Exploits0
CBLMariner
CBLMariner
added 2023/09/27 6:2 p.m.27 views

CVE-2022-3094 affecting package bind for versions less than 9.16.37-2

CVE-2022-3094 affecting package bind for versions less than 9.16.37-2. An upgraded version of the package is available that resolves this issue...

7.5CVSS8AI score0.13213EPSS
Exploits0
OSV
OSV
added 2023/09/27 4:38 p.m.18 views

SUSE-SU-2023:3821-1 Security update for bind

This update for bind fixes the following issues: Update to release 9.16.44: - CVE-2023-3341: Fixed stack exhaustion flaw in control channel code may cause named to terminate unexpectedly bsc1215472. Update to release 9.16.43 Processing already-queued queries received over TCP could cause an...

7.5CVSS7.5AI score0.02626EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2023/09/27 3:19 p.m.1 views

CVE-2023-44013

Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the list parameter in the fromSetIpMacBind function...

9.8CVSS5.9AI score0.0091EPSS
Exploits0References2
Rows per page
Query Builder