Lucene search
+L

404 matches found

Prion
Prion
•added 2015/07/08 2:59 p.m.•23 views

Authentication flaw

name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit by constructing crafted zone data and then...

7.8CVSS6.9AI score0.37872EPSS
SaveExploits0References21Affected Software1
Mend
Mend
•added 2015/07/08 2:00 p.m.•2 views

CVE-2015-4620

name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit by constructing crafted zone data and then...

8.7CVSS0.37872EPSS
SaveExploits0References24
Cvelist
Cvelist
•added 2015/07/08 2:00 p.m.•41 views

CVE-2015-4620

name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit by constructing crafted zone data and then...

8.2AI score0.37872EPSS
SaveExploits0References21
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/07/08 12:00 a.m.•8 views

CVE-2015-4620: Undefined Security Weakness

name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit by constructing crafted zone data and then...

7.8CVSS7.3AI score0.37872EPSS
SaveExploits0References2
Ubuntu
Ubuntu
•added 2015/07/07 6:55 p.m.•71 views

USN-2669-1: Bind vulnerability

Breno Silveira Soares discovered that Bind incorrectly handled certain zone data when configured to perform DNSSEC validation. A remote attacker could use this issue with specially crafted zone data to cause Bind to crash, resulting in a denial of service...

7.8CVSS7.4AI score0.37872EPSS
SaveExploits0
UbuntuCve
UbuntuCve
•added 2015/07/07 5:00 p.m.•41 views

CVE-2015-4620

name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit by constructing crafted zone data and then...

7.8CVSS7.2AI score0.37872EPSS
SaveExploits0References3
OSV
OSV
•added 2015/07/07 4:05 p.m.•20 views

SUSE-SU-2015:1204-1 Security update for bind

bind was updated to fix two security issues. These security issues were fixed: - CVE-2015-1349: Named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allowed remote attackers to cause a denial of service...

7.8CVSS6.7AI score0.37872EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2015/07/07 12:00 a.m.•3 views

PT-2015-6643

Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.7.x through 9.9.x before 9.9.7-P1 ISC BIND versions 9.10.x before 9.10.2-P2 Description The issue allows remote attackers to cause a denial of service by constructing crafted zone data and then making a query for a name in...

7.8CVSS0.37872EPSS
SaveExploits0References114
ArchLinux
ArchLinux
•added 2015/07/07 12:00 a.m.•50 views

bind: denial of service

A very uncommon combination of zone data has been found that triggers a bug in BIND, with the result that named will exit with a "REQUIRE" failure in name.c when validating the data returned in answer to a recursive query. This means that a recursive resolver that is performing DNSSEC validation...

7.8CVSS4.4AI score0.37872EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2015/03/26 12:00 a.m.•29 views

Debian DLA-163-1 : bind9 security update

Jan-Piet Mens discovered that the BIND DNS server would crash when processing an invalid DNSSEC key rollover, either due to an error on the zone operator's part, or due to interference with network traffic by an attacker. This issue affects configurations with the directives 'dnssec-validation...

5.4CVSS7.2AI score0.22168EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2015/02/24 12:00 a.m.•37 views

ISC BIND 9.9.6-S2 DNSSEC Validation DoS

According to its self-reported version number, the remote installation of BIND via DNSco is potentially affected by a denial of service vulnerability due to an error relating to DNSSEC validation and the managed-keys feature. A remote attacker can trigger an incorrect trust-anchor management...

5.4CVSS7.2AI score0.22168EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2015/02/24 12:00 a.m.•26 views

ISC BIND 9.7.0.x < 9.9.6-P2 DNSSEC Validation DoS

According to its self-reported version number, the remote installation of BIND is potentially affected by a denial of service vulnerability due to an error relating to DNSSEC validation and the managed-keys feature. A remote attacker can trigger an incorrect trust-anchor management scenario in...

5.4CVSS7.2AI score0.22168EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2015/02/24 12:00 a.m.•38 views

ISC BIND 9.10.x < 9.10.1-P2 DNSSEC Validation DoS

According to its self-reported version number, the remote installation of BIND is potentially affected by a denial of service vulnerability due to an error relating to DNSSEC validation and the managed-keys feature. A remote attacker can trigger an incorrect trust-anchor management scenario in...

5.4CVSS7.2AI score0.22168EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2015/02/24 12:00 a.m.•111 views

ISC BIND 9.10.2 < 9.10.2rc2 Multiple Vulnerabilities

According to its self-reported version number, the remote installation of BIND is potentially affected by multiple vulnerabilities : - A flaw exists within the Domain Name Service due to an error in the code used to follow delegations. A remote attacker, with a maliciously-constructed zone or...

7.8CVSS6.9AI score0.57794EPSS
SaveExploits0References5
NVD
NVD
•added 2015/02/19 3:01 a.m.•24 views

CVE-2015-1349

named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit, or daemon crash by triggering an incorrect trust-anchor...

5.4CVSS7.5AI score0.22168EPSS
SaveExploits0References18
Prion
Prion
•added 2015/02/19 3:01 a.m.•25 views

Design/Logic Flaw

named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit, or daemon crash by triggering an incorrect trust-anchor...

5.4CVSS7AI score0.22168EPSS
SaveExploits0References18Affected Software1
Cvelist
Cvelist
•added 2015/02/19 2:00 a.m.•41 views

CVE-2015-1349

named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit, or daemon crash by triggering an incorrect trust-anchor...

8.3AI score0.22168EPSS
SaveExploits0References18
Debian CVE
Debian CVE
•added 2015/02/19 2:00 a.m.•39 views

CVE-2015-1349

named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit, or daemon crash by triggering an incorrect trust-anchor...

5.4CVSS7.6AI score0.22168EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2015/02/18 12:00 a.m.•3 views

PT-2015-5228

Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.7.0 through 9.9.6 before 9.9.6-P2 ISC BIND versions 9.10.x before 9.10.1-P2 Description The issue allows remote attackers to cause a denial of service by triggering an incorrect trust-anchor management scenario in which no...

5.4CVSS0.22168EPSS
SaveExploits0References117
Tenable Nessus
Tenable Nessus
•added 2014/10/28 12:00 a.m.•46 views

F5 Networks BIG-IP : BIND vulnerability (SOL15748)

Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and checking disabled CD, allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query a...

4CVSS7.3AI score0.07952EPSS
SaveExploits1References3
Rows per page
Query Builder