FreeBSD : BIND -- multiple vulnerabilities (d4c7e9a9-d893-11e6-9b4d-d050996490d0)

ISC reports : A malformed query response received by a recursive server in response to a query of RTYPE ANY could trigger an assertion failure while named is attempting to add the RRs in the query response to the cache. Depending on the type of query and the EDNS options in the query they receive...

The vulnerability of the BIND Server software allows a malicious attacker to compromise the accessibility of protected information.

The vulnerability exists in libdns within ISC BIND due to incorrect processing of EDNS parameters. Exploiting this vulnerability allows malicious actors operating remotely to trigger a service failure a REQUIRE validation error and termination of the daemon using a specially crafted package...

ISC BIND EDNS Option Processing Denial of Service - Ver2 (CVE-2014-3859)

A denial of service vulnerability has been reported in ISC BIND. The vulnerability is caused by an assertion failure when processing the EDNS option. A remote attacker may exploit this vulnerability by sending a specially crafted query to the affected servers. Successful exploitation would result...

ISC BIND 9.10.x < 9.10.1-P1 Multiple DoS

Binary data 8569.prm...

CVE-2014-3859

libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit via a crafted packet, as demonstrated by an attack against named, dig, or delv...

ISC Patches Critical DoS Vulnerability in BIND

A critical, remotely exploitable bug in some BIND domain name system DNS servers could cause a denial of service situation and trigger them to crash. The defect lies in the extension mechanisms for DNS EDNS specification, the Internet Systems Consortium, which performs upkeep on the system,...

CVE-2014-3859

libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit via a crafted packet, as demonstrated by an attack against named, dig, or delv...

CVE-2014-3859

CVE-2014-3859 affects ISC BIND 9.x where EDNS option processing is vulnerable to a crafted packet causing an assertion failure and daemon exit, resulting in a denial of service. Concrete references across multiple vendors/inputs confirm exposure in BIND 9.10.0 before P2 and related 9.x releases, ...

ISC BIND 9 EDNS Processing DoS

According to its self-reported version number, the remote installation of BIND is affected by a denial of service vulnerability. The issue exists due to an error in 'libdns' that fails to properly handle Extension Mechanisms for DNS EDNS options. Note that Nessus has not tested for this issue but...