DNSSEC Client Query Detection

Binary data 8187.prm...

Juniper Networks Junos OS DNSSEC validation Denial of Service

Heavy DNSSEC validation load can cause assertion failure in Bind of Junos OS. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Amazon Linux AMI : bind (ALAS-2012-113)

An uninitialized data structure use flaw was found in BIND when DNSSEC validation was enabled. A remote attacker able to send a large number of queries to a DNSSEC validating BIND resolver could use this flaw to cause it to exit unexpectedly with an assertion failure. CVE-2012-3817 C Tenable...

Oracle Linux 5 : bind97 (ELSA-2012-1122)

"From Red Hat Security Advisory 2012:1122 : Updated bind97 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score,...

Juniper Junos DNSSEC Validation DoS (PSN-2013-04-918)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. When DNSSEC is enabled and validation is active, a high query load can cause the host to crash. A remote, unauthenticated attacker could exploit this to crash the host. C Tenable Network...

ISC BIND 9 Multiple DoS

Binary data 6807.prm...

Cautious Optimism over Google DNSSEC Deployment

Google’s announcement that its Google Public DNS resolution service now supports DNSSEC is being applauded, but experts caution that despite Google’s high profile, this only puts a slight dent in a larger issue. “I think it’s great that Google is getting involved and supporting validation for...

Multilayer DDoS Attacks Have Reset Stage for Network Attacks

Back in the dark days of dial-up connectivity, attackers wouldn’t bother compromising home computers as bots to be used in distributed denial-of-service. The lack of bandwidth made PCs persona non grata in the DDoS world. Instead, attackers targeted Web servers, the only machines with the...

SuSE 11.1 / 11.2 Security Update : bind (SAT Patch Numbers 6604 / 6605)

The bind nameserver was updated to fix a crash denial of service that might have happened during high DNSSEC validation load. CVE-2012-3817 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. T...

AIX 5.3 TL 12 : bind9 (IV09491)

An as-yet unidentified network event caused BIND 9 resolvers to cache an invalid record, subsequent queries for which could crash the resolvers with an assertion failure. Furthermore, AIX BIND 9.4.1 is affected by the following three security vulnerabilities: CVE-2010-0382 - ISC BIND...

AIX 7.1 TL 0 : bind9 (IV11744)

An as-yet unidentified network event caused BIND 9 resolvers to cache an invalid record, subsequent queries for which could crash the resolvers with an assertion failure. Furthermore, AIX BIND 9.4.1 is affected by the following three security vulnerabilities: CVE-2010-0382 - ISC BIND...

AIX 6.1 TL 6 : bind9 (IV11743)

An as-yet unidentified network event caused BIND 9 resolvers to cache an invalid record, subsequent queries for which could crash the resolvers with an assertion failure. Furthermore, AIX BIND 9.4.1 is affected by the following three security vulnerabilities: CVE-2010-0382 - ISC BIND...

Six Security Flaws Fixed in BIND 9.9.2

A new version of the BIND DNS server software is available, fixing six security vulnerabilities and a long list of other bugs. BIND 9.9.2-P1 is mainly a security update and most of the issues it fixes are crashes and not remote code execution flaws. BIND is the overwhelming leader in market share...

BIND: Multiple vulnerabilities

Background BIND is the Berkeley Internet Name Domain Server. Description Multiple vulnerabilities have been discovered in BIND: Domain names are not properly revoked due to an error in the cache update policy CVE-2012-1033. BIND accepts records with zero-length RDATA fields CVE-2012-1667. An...

GLSA-201209-04 : BIND: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201209-04 BIND: Multiple vulnerabilities Multiple vulnerabilities have been discovered in BIND: Domain names are not properly revoked due to an error in the cache update policy CVE-2012-1033. BIND accepts records with zero-length...

Slackware Advisory SSA:2010-176-01 bind

The remote host is missing an update as announced via advisory SSA:2010-176-01. OpenVAS Vulnerability Test $Id: esoftslkssa201017601.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2010-176-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Linux Security Advisory : bind (MDVSA-2012:119)

A vulnerability was discovered and corrected in bind : High numbers of queries with DNSSEC validation enabled can cause an assertion failure in named, caused by using a bad cache data structure before it has been initialized CVE-2012-3817. The updated packages have been upgraded to bind 9.7.6-P2...

SuSE 10 Security Update : bind (ZYPP Patch Number 8237)

The bind nameserver was updated to fix a crash denial of service that may have been caused by high DNSSEC validation load. CVE-2012-3817 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'...

FreeBSD Ports: FreeBSD

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...