2040 matches found
CVE-2016-0771
The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service out-of-bounds read or possibly obtain sensitive information from process memory by...
Debian DSA-3511-1 : bind9 - security update
Two vulnerabilites have been discovered in ISC's BIND DNS server. - CVE-2016-1285 A maliciously crafted rdnc, a way to remotely administer a BIND server, operation can cause named to crash, resulting in denial of service. - CVE-2016-1286 An error parsing DNAME resource records can cause named to...
[SECURITY] [DSA 3511-1] bind9 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3511-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 09, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3511-1] bind9 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3511-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 09, 2016 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3511-1 (bind9 - security update)
Two vulnerabilities have been discovered in ISC OpenVAS Vulnerability Test $Id: deb3511.nasl 7585 2017-10-26 15:03:01Z cfischer $ Auto-generated from advisory DSA 3511-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2016 Greenbone Networks GmbH...
Ubuntu 14.04 LTS : Samba vulnerabilities (USN-2922-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2922-1 advisory. Jeremy Allison discovered that Samba incorrectly handled ACLs on symlink paths. A remote attacker could use this issue to overwrite the ownership of ACLs...
Debian: Security Advisory (DSA-3511-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ESXi 5.5 < Build 3568722 / 6.0 < Build 3568940 glibc DNS Resolver RCE (VMSA-2016-0002) (remote check)
The remote VMware ESXi host is 5.5 prior to build 3568722 or 6.0 prior to build 3568940. It is, therefore, affected by a stack-based buffer overflow condition in the GNU C Library glibc DNS client-side resolver due to improper validation of user-supplied input when looking up names via the...
glibc getaddrinfo 栈缓冲区溢出漏洞(CVE-2015-7547)
漏洞概要 Glibc是GNU发布的LIBC库的C运行库，Glibc是Linux系统中最底层的API，基本其它任何运行库都会依赖于Glibc。Glibc除了封装Linux操作系统所提供的系统服务外，还提供了其它的必要服务的实现。由于 Glibc 几乎包含所有的 UNIX 通行的标准，可以说是操作系统重要支撑库。 Glibc中的 DNS...
Ubuntu 14.04 LTS : nginx vulnerabilities (USN-2892-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2892-1 advisory. It was discovered that nginx incorrectly handled certain DNS server responses when the resolver is enabled. A remote attacker could possibly use this iss...
Ubuntu: Security Advisory (USN-2892-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-2892-1: nginx vulnerabilities
It was discovered that nginx incorrectly handled certain DNS server responses when the resolver is enabled. A remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service. CVE-2016-0742 It was discovered that nginx incorrectly handled CNAME response...
RHEL 6 : bind (RHSA-2016:0079)
"The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0079 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named C...
Debian DLA-404-1 : nginx security update
It was discovered that there was a invalid pointer deference in nginx, a small, powerful, scalable web/proxy server. An invalid pointer dereference might occur during DNS server response processing, allowing an attacker who is able to forge UDP packets from the DNS server to cause worker process...
DLA-404-1 nginx - security update
Bulletin has no description...
[SECURITY] Fedora 23 Update: bind-9.10.3-10.P3.fc23
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...
bind: denial of service
CVE-2015-8704 denial of service A buffer size check used to guard against overflow could cause named to exit with an INSIST failure In apl42.c. A server could exit while performing certain string formatting operations. Examples include but may not be limited to: 1 Slaves using text-format db...
[SECURITY] [DSA 3449-1] bind9 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3449-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 19, 2016 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3449-1 (bind9 - security update)
It was discovered that specific APL RR data could trigger an INSIST failure in apl42.c and cause the BIND DNS server to exit, leading to a denial-of-service. OpenVAS Vulnerability Test $Id: deb3449.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3449-1 using nvtgen 1.0...