Lucene search
+L

1867 matches found

Prion
Prion
added 2019/10/17 8:15 p.m.19 views

Design/Logic Flaw

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

5CVSS7.2AI score0.01273EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2019/10/17 7:17 p.m.106 views

CVE-2019-6475

CVE-2019-6475 : In ISC BIND, an error in mirror zone validity checks can allow an on-path attacker to replace zone data that was validated with a trust anchor with forged data. Affected: BIND 9.14.0–9.14.6 and 9.15.0–9.15.4. Impact details are as described in the vulnerability entry; no remediati...

7.5CVSS6.2AI score0.01273EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2019/10/17 7:17 p.m.71 views

CVE-2019-6475

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

7.5CVSS6.5AI score0.01273EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2019/10/17 7:17 p.m.76 views

CVE-2019-6475

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

7.5CVSS6.3AI score0.01273EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2019/10/16 12:00 a.m.35 views

CVE-2019-6475

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

7.5CVSS6.8AI score0.01273EPSS
SaveExploits0References1
NVD
NVD
added 2019/10/09 4:15 p.m.20 views

CVE-2018-5745

"managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses managed-keys to exit due to an assertio...

4.9CVSS6AI score0.02282EPSS
SaveExploits0References2
OSV
OSV
added 2019/10/09 4:15 p.m.43 views

CVE-2018-5745

"managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses managed-keys to exit due to an assertio...

4.9CVSS7.4AI score
SaveExploits0References2
Prion
Prion
added 2019/10/09 4:15 p.m.40 views

Design/Logic Flaw

"managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses managed-keys to exit due to an assertio...

3.5CVSS6AI score0.02282EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/10/09 2:17 p.m.35 views

CVE-2018-5745 An assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys

"managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses managed-keys to exit due to an assertio...

4.9CVSS6.2AI score0.02282EPSS
SaveExploits0References2
CVE
CVE
added 2019/10/09 2:17 p.m.545 views

CVE-2018-5745

CVE-2018-5745 affects BIND's managed-keys feature, causing an assertion failure (and possible server exit) when a trust anchor is rolled over to an unsupported key algorithm. Affected: BIND 9 series (various 9.9.x–9.13.x branches and preview releases). Impact: potential denial of service by crash...

4.9CVSS6.2AI score0.02282EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2019/10/09 2:17 p.m.34 views

CVE-2018-5745

"managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses managed-keys to exit due to an assertio...

4.9CVSS6.3AI score0.02282EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2019/10/09 2:17 p.m.36 views

CVE-2018-5745

"managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses managed-keys to exit due to an assertio...

4.9CVSS6.4AI score0.02282EPSS
SaveExploits0
OSV
OSV
added 2019/10/08 12:40 p.m.6 views

SUSE-SU-2019:14190-1 Security update for dnsmasq

This update for dnsmasq fixes the following issues: Security issue fixed: - CVE-2017-15107: Fixed a vulnerability in DNSSEC implementation. Processing of wildcard synthesized NSEC records may result improper validation for non-existance. bsc1076958 Non-security issue fixed: - Removed cache size...

7.5CVSS7.5AI score0.02451EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2019/10/05 8:37 p.m.36 views

CVE-2016-9147

A denial of service flaw was found in the way BIND handled a query response containing inconsistent DNSSEC information. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

7.5CVSS1.8AI score0.10146EPSS
SaveExploits0References2
Akamai Blog
Akamai Blog
added 2019/08/19 4:00 p.m.133 views

Fast DNS: Zone Apex Mapping & DNSSEC

Introduction Along with its DDoS resilience and impressive global footprint, Fast DNS affords zone administrators additional technical flexibility and implementation options. One example is Zone Apex Mapping ZAM -- a feature that enables apex domains to be mapped directly to an Akamai edge IP. Th...

6.8AI score
SaveExploits0
Akamai Blog
Akamai Blog
added 2019/08/19 7:00 a.m.28 views

Edge DNS: Zone Apex Mapping & DNSSEC

Along with its DDoS resilience and impressive global footprint, Akamai Edge DNS offers zone administrators additional technical flexibility and implementation options to improve performance and simplify DNS operations. One example is zone apex mapping ZAM, a feature that enables top level hostnam...

1.2AI score
SaveExploits0
Oracle linux
Oracle linux
added 2019/08/13 12:00 a.m.68 views

bind security, bug fix, and enhancement update

32:9.11.4-9.P2 - Fix CVE-2019-6471 32:9.11.4-8.P2 - Fix scriptlet errors when selinux-policy is not installed 1647659 32:9.11.4-7.P2 - Fix inefective limit of TCP clients CVE-2018-5743 32:9.11.4-6.P2 - Use /sbin/nologin again 1676661 32:9.11.4-5.P2 - Make sure selinux-policy is installed soon...

7.5CVSS0.2AI score0.06457EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/08/12 12:00 a.m.34 views

NewStart CGSL MAIN 4.05 : bind Multiple Vulnerabilities (NS-SA-2019-0102)

The remote NewStart CGSL host, running version MAIN 4.05, has bind packages installed that are affected by multiple vulnerabilities: - A flaw was found in the way BIND handled TSIG authentication for dynamic updates. A remote attacker able to communicate with an authoritative BIND server could us...

7.5CVSS6.4AI score0.63346EPSS
SaveExploits1References7
NVD
NVD
added 2019/07/30 3:15 p.m.24 views

CVE-2018-20869

cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin SEC-465...

7.8CVSS8AI score0.00558EPSS
SaveExploits0References1
OSV
OSV
added 2019/07/30 3:15 p.m.9 views

CVE-2018-20869

cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin SEC-465...

7.8CVSS6.2AI score0.00558EPSS
SaveExploits0References1
Rows per page
Query Builder