CVE-2015-5722

CVE-2015-5722 affects ISC BIND: a DoS via parsing a malformed DNSSEC key triggers an assertion failure in buffer.c, causing the validating resolver to exit. A remote attacker can exploit this with a crafted DNS query for a zone containing a malformed key. The vulnerability exists in BIND 9.x befo...

OracleVM 3.3 : bind (OVMSA-2015-0119)

The remote OracleVM system is missing necessary patches to address critical security updates : - Apply previously not applied patch for CVE-2015-5722 - Fix CVE-2015-5722 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security...

FreeBSD : bind -- denial of service vulnerability (2c5e7e23-5248-11e5-9ad8-14dae9d210b8)

ISC reports : An incorrect boundary check in openpgpkey61.c can cause named to terminate due to a REQUIRE assertion failure. This defect can be deliberately exploited by an attacker who can provide a maliciously constructed response in answer to a query. %NASLMINLEVEL 70300 C Tenable Network...

SUSE SLED11 / SLES11 Security Update : bind (SUSE-SU-2015:1480-1)

The nameserver bind was updated to fix a remote denial of service crash attack against bind nameservers doing validation on DNSSEC signed records. CVE-2015-5722, bsc944066. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

Scientific Linux Security Update : bind on SL6.x, SL7.x i386/x86_64 (20150903)

A denial of service flaw was found in the way BIND parsed certain malformed DNSSEC keys. A remote attacker could use this flaw to send a specially crafted DNS query for example, a query requiring a response from a zone containing a deliberately malformed key that would cause named functioning as ...

FreeBSD : bind -- denial of service vulnerability (eaf3b255-5245-11e5-9ad8-14dae9d210b8)

ISC reports : Parsing a malformed DNSSEC key can cause a validating resolver to exit due to a failed assertion in buffer.c. It is possible for a remote attacker to deliberately trigger this condition, for example by using a query which requires a response from a zone containing a deliberately...

CentOS Update for bind CESA-2015:1705 centos7

Check the version of bind SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882274";...

Oracle Linux 6 / 7 : bind (ELSA-2015-1705)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1705 advisory. - Apply previously not applied patch for CVE-2015-5722 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2015:1481-1)

The nameserver bind was updated to fix a remote denial of service crash attack against bind nameservers doing validation on DNSSEC signed records. CVE-2015-5722, bsc944066. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

Oracle Linux 5 : bind (ELSA-2015-1706)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1706 advisory. - Fix CVE-2015-5722 - Fix CVE-2015-5477 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Scientific Linux Security Update : bind on SL5.x i386/x86_64 (20150903)

A denial of service flaw was found in the way BIND parsed certain malformed DNSSEC keys. A remote attacker could use this flaw to send a specially crafted DNS query for example, a query requiring a response from a zone containing a deliberately malformed key that would cause named functioning as ...

CentOS Update for bind CESA-2015:1706 centos5

Check the version of bind SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882273";...

CentOS Update for bind CESA-2015:1705 centos6

Check the version of bind SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882280";...

bind security update

CentOS Errata and Security Advisory CESA-2015:1705 Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score,...

Important: Red Hat Security Advisory: bind security update

Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

bind: malformed DNSSEC key failed assertion denial of service

A denial of service flaw was found in the way BIND parsed certain malformed DNSSEC keys. A remote attacker could use this flaw to send a specially crafted DNS query for example, a query requiring a response from a zone containing a deliberately malformed key that would cause named functioning as ...

Important: Red Hat Security Advisory: bind security update

Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from...

bind: malformed DNSSEC key failed assertion denial of service

A denial of service flaw was found in the way BIND parsed certain malformed DNSSEC keys. A remote attacker could use this flaw to send a specially crafted DNS query for example, a query requiring a response from a zone containing a deliberately malformed key that would cause named functioning as ...

bind: malformed DNSSEC key failed assertion denial of service

A denial of service flaw was found in the way BIND parsed certain malformed DNSSEC keys. A remote attacker could use this flaw to send a specially crafted DNS query for example, a query requiring a response from a zone containing a deliberately malformed key that would cause named functioning as ...

SOL17227 - BIND vulnerability CVE-2015-5986

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...