Lucene search
+L

2634 matches found

Prion
Prion
added 2016/07/19 10:59 p.m.27 views

Design/Logic Flaw

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service daemon crash via a long request that uses the lightweight resolver protocol...

4.3CVSS6.9AI score0.63346EPSS
SaveExploits0References16Affected Software9
UbuntuCve
UbuntuCve
added 2016/07/19 10:59 p.m.26 views

CVE-2016-2775

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service daemon crash via a long request that uses the lightweight resolver protocol...

5.9CVSS6.8AI score0.63346EPSS
SaveExploits0References3
OSV
OSV
added 2016/07/19 10:59 p.m.11 views

CVE-2016-2775

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service daemon crash via a long request that uses the lightweight resolver protocol...

5.9CVSS5.7AI score0.63346EPSS
SaveExploits0References16
Cvelist
Cvelist
added 2016/07/19 10:0 p.m.32 views

CVE-2016-2775

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service daemon crash via a long request that uses the lightweight resolver protocol...

5.8AI score0.63346EPSS
SaveExploits0References16
CVE
CVE
added 2016/07/19 10:0 p.m.493 views

CVE-2016-2775

CVE-2016-2775 is a denial-of-service in ISC BIND where, when lwresd or the lwres option is enabled, an overly long request using the lightweight resolver protocol can crash the daemon. Affected versions: BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2. Public advisor...

5.9CVSS5.7AI score0.63346EPSS
SaveExploits0References16Affected Software1
Debian CVE
Debian CVE
added 2016/07/19 10:0 p.m.32 views

CVE-2016-2775

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service daemon crash via a long request that uses the lightweight resolver protocol...

5.9CVSS6.5AI score0.63346EPSS
SaveExploits0
FreeBSD
FreeBSD
added 2016/07/18 12:0 a.m.37 views

bind -- denial of service vulnerability

ISC reports: A query name which is too long can cause a segmentation fault in lwresd...

5.9CVSS2.9AI score0.63346EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2016/07/08 12:0 a.m.55 views

ISC BIND AXFR Response Denial of Service Vulnerability

ISC BIND is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; if description...

6.5CVSS6.6AI score0.40536EPSS
SaveExploits1References2
NVD
NVD
added 2016/07/06 2:59 p.m.22 views

CVE-2016-6170

ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service secondary DNS server crash via a large AXFR response, and possibly allows IXFR servers to cause a denial of service IXFR client crash via a large IXFR response...

6.5CVSS6.2AI score0.40536EPSS
SaveExploits1References11
OSV
OSV
added 2016/07/06 2:59 p.m.10 views

CVE-2016-6170

ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service secondary DNS server crash via a large AXFR response, and possibly allows IXFR servers to cause a denial of service IXFR client crash via a large IXFR response...

6.5CVSS6.2AI score0.40536EPSS
SaveExploits1References11
UbuntuCve
UbuntuCve
added 2016/07/06 2:59 p.m.35 views

CVE-2016-6170

ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service secondary DNS server crash via a large AXFR response, and possibly allows IXFR servers to cause a denial of service IXFR client crash via a large IXFR response...

6.5CVSS6.9AI score0.40536EPSS
SaveExploits1References9
Prion
Prion
added 2016/07/06 2:59 p.m.33 views

Code injection

ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service secondary DNS server crash via a large AXFR response, and possibly allows IXFR servers to cause a denial of service IXFR client crash via a large IXFR response...

4CVSS6.6AI score0.40536EPSS
SaveExploits1References11Affected Software2
CVE
CVE
added 2016/07/06 2:0 p.m.445 views

CVE-2016-6170

CVE-2016-6170 affects ISC BIND up to 9.11.0b1 (and related 9.9.9-P1, 9.10.x, etc.). The provided records describe a denial-of-service risk: a primary DNS server can crash a secondary server via a large AXFR, IXFR responses, and an authenticated UPDATE could crash the primary. Documented affected ...

6.5CVSS6.2AI score0.40536EPSS
SaveExploits1References11Affected Software1
Cvelist
Cvelist
added 2016/07/06 2:0 p.m.42 views

CVE-2016-6170

ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service secondary DNS server crash via a large AXFR response, and possibly allows IXFR servers to cause a denial of service IXFR client crash via a large IXFR response...

6.3AI score0.40536EPSS
SaveExploits1References11
Debian CVE
Debian CVE
added 2016/07/06 2:0 p.m.21 views

CVE-2016-6170

ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service secondary DNS server crash via a large AXFR response, and possibly allows IXFR servers to cause a denial of service IXFR client crash via a large IXFR response...

6.5CVSS6.7AI score0.40536EPSS
SaveExploits1
FreeBSD
FreeBSD
added 2016/07/06 12:0 a.m.69 views

BIND,Knot,NSD,PowerDNS -- denial over service via oversized zone transfers

ISC reports: DNS protocols were designed with the assumption that a certain amount of trust could be presumed between the operators of primary and secondary servers for a given zone. However, in current practice some organizations have scenarios which require them to accept zone data from sources...

8.6CVSS3.5AI score0.40536EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2016/06/20 12:0 a.m.30 views

AIX 5.3 TL 12 : bind (IV85298) (deprecated)

https://vulners.com/cve/CVE-2016-1285 ISC BIND is vulnerable to a denial of service, caused by the improper handling of control channel input. By sending a specially crafted packet, a remote attacker could exploit this vulnerability to trigger an assertion failure in sexpr.c or alist.c and cause...

7.9AI score0.621EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2016/06/20 12:0 a.m.42 views

AIX 7.1 TL 3 : bind (IV85296) (deprecated)

https://vulners.com/cve/CVE-2016-1285 ISC BIND is vulnerable to a denial of service, caused by the improper handling of control channel input. By sending a specially crafted packet, a remote attacker could exploit this vulnerability to trigger an assertion failure in sexpr.c or alist.c and cause...

7.9AI score0.621EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2016/06/20 12:0 a.m.54 views

AIX 7.1 TL 3 : bind (IV84457) (deprecated)

https://vulners.com/cve/CVE-2016-1285 ISC BIND is vulnerable to a denial of service, caused by the improper handling of control channel input. By sending a specially crafted packet, a remote attacker could exploit this vulnerability to trigger an assertion failure in sexpr.c or alist.c and cause...

7.9AI score0.621EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2016/06/20 12:0 a.m.32 views

AIX 7.2 TL 0 : bind (IV85297) (deprecated)

https://vulners.com/cve/CVE-2016-1285 ISC BIND is vulnerable to a denial of service, caused by the improper handling of control channel input. By sending a specially crafted packet, a remote attacker could exploit this vulnerability to trigger an assertion failure in sexpr.c or alist.c and cause...

7.9AI score0.621EPSS
SaveExploits0References3
Rows per page
Query Builder