2404 matches found
CVE-2015-1349: Undefined Security Weakness
named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit, or daemon crash by triggering an incorrect trust-anchor...
[SECURITY] [DSA 3162-1] bind9 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3162-1 [email protected] http://www.debian.org/security/ Florian Weimer February 18, 2015 http://www.debian.org/security/faq -...
UBUNTU-CVE-2015-1349
named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit, or daemon crash by triggering an incorrect trust-anchor...
Debian Security Advisory DSA 3162-1 (bind9 - security update)
Jan-Piet Mens discovered that the BIND DNS server would crash when processing an invalid DNSSEC key rollover, either due to an error on the zone operator OpenVAS Vulnerability Test $Id: deb3162.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3162-1 using nvtgen 1.0 Scri...
DSA-3162-1 bind9 - security update
Bulletin has no description...
PT-2015-5228
Name of the Vulnerable Software and Affected Versions ISC BIND versions 9.7.0 through 9.9.6 before 9.9.6-P2 ISC BIND versions 9.10.x before 9.10.1-P2 Description The issue allows remote attackers to cause a denial of service by triggering an incorrect trust-anchor management scenario in which no...
Debian: Security Advisory (DSA-3162-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Securing DNS Essential to Web's Future, Dan Kaminsky
CANCUN – “2015 got weird… really weird.” Those were some of the first words spoken by Dan Kaminsky in his talk today at the Kaspersky Security Analyst Summit Monday. He was referring to a few key events from the last several weeks: the Sony hack debacle, or what he called “North Korean or...
[SECURITY] Fedora 20 Update: unbound-1.5.1-2.fc20
Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...
[SECURITY] Fedora 21 Update: unbound-1.5.1-2.fc21
Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...
F5 Networks BIG-IP : BIND vulnerability (SOL15748)
Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and checking disabled CD, allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query a...
F5 Networks BIG-IP : BIND 9 vulnerabilities - Dereferencing freed fetch context and DNSSEC Validation (SOL7053)
The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL7053. The text description of this plugin is C F5 Networks...
F5 Networks BIG-IP : DNSSEC BIND vulnerability (SOL10898)
Unspecified vulnerability in ISC BIND 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, 9.7 beta before 9.7.0b3, and 9.0.x through 9.3.x with DNSSEC validation enabled and checking disabled CD, allows remote attackers to conduct DNS cache poisoning attacks via additional sections in ...
Small Signs of Progress on DNSSEC
SEATTLE–DNS doesn’t have a lot of friends. It’s old, it’s kind of creaky and it has some insecurity issues. The few friends it has have tried to help it out in the last few years with the addition of DNSSEC, but that hasn’t gone so well, either. The Internet hasn’t been quick to adopt DNSSEC, for...
openSUSE Security Update : exim (openSUSE-SU-2014:0983-1)
"Changes in exim : - Silence static checkers; beo1506. - update to 4.83 This release of Exim includes one incompatible fix : + the behavior of expansion of arguments to math comparison functions , was unexpected, expanding the values twice; CVE-2014-2972; bnc888520 This release contains the...
openSUSE Security Update : bind (openSUSE-SU-2010:1031-1)
Adding certain types of signed negative responses to cache doesn't clear any matching RRSIG records already in cache. A subsequent lookup of the cached data can cause named to crash CVE-2010-3613. bind did not properly determine the security status of an NS RRset during a DNSKEY algorithm rollove...
openSUSE Security Update : bind (openSUSE-SU-2012:0971-1)
bind was updated to fix a remote denial of service crash problem in high load DNSSEC scenarious. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-493. The text description of this...
openSUSE Security Update : bind (openSUSE-SU-2013:0605-1)
bind was updated to 9.8.4-P2 to fix security problems and bugs. Security Fixes Removed the check for regex.h in configure in order to disable regex syntax checking, as it exposes BIND to a critical flaw in libregex on some platforms. CVE-2013-2266 RT 32688 https://kb.isc.org/article/AA-00871...
openSUSE Security Update : bind (openSUSE-SU-2010:0917-1)
A DoS vulnerability in bind's DNSSEC code has been fixed which occured while recursively validating a server. CVE-2010-0213 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...