bind security update

CentOS Errata and Security Advisory CESA-2007:0044 Updated bind packages that fix a security issue and a bug are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ISC BIND Berkeley Internet Name Domain is an implementation of the D...

Moderate: Red Hat Security Advisory: bind security update

Updated bind packages that fix a security issue and a bug are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ISC BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. A flaw was found i...

ISC BIND远程Fetch上下文拒绝服务漏洞

ISC BIND是一款开放源代码的Internet域名名字系统实现。 ISC BIND存在可能引用释放的Fetch上下问存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 目前没有解决方案提供。 ISC BIND 9.5 a1 ISC BIND 9.4 rc1 ISC BIND 9.4 b4 ISC BIND 9.4 b3 ISC BIND 9.4 b2 ISC BIND 9.4 b1 ISC BIND 9.4 a6 ISC BIND 9.4 a5 ISC BIND 9.4 a4 ISC BIND 9.4 a3 ISC BIND 9.4 a2 ISC BIND 9.4 a1 I...

ISC BIND DNSSEC验证远程拒绝服务漏洞

ISC BIND是一个应用非常广泛的DNS协议的实现，由ISC负责维护，具体的开发由Nominumwww.nominum.com公司来完成。 ISC BIND在处理用户请求时存在漏洞，远程攻击者可能利用此漏洞导致BIND拒绝服务。 在验证对ANY类型请求的响应时如果请求在回答会话中返回了多个RRset的话就可能触发异常处理，导致BIND拒绝服务。仅在用户通过指定可信任密钥在named.conf中启用了dnssec验证的情况下才会出现这个漏洞。 ISC BIND 9.5.0a1 ISC BIND 9.4.x ISC BIND 9.3.x ISC BIND 9.2.x ISC BIND...

ISC BIND Fetch上下文远程拒绝服务漏洞

ISC BIND是一个应用非常广泛的DNS协议的实现，由ISC负责维护，具体的开发由Nominumwww.nominum.com公司来完成。 ISC BIND在处理畸形请求时存在漏洞，远程攻击者可能利用此漏洞导致守护进程崩溃。 远程攻击者可以通过发送恶意请求导致named读取已释放的fetch上下文，这样named会意外退出 ISC BIND 9.5.0a1 ISC BIND 9.4.x ISC BIND 9.3.x ISC BIND 9.2.x ISC BIND 9.1.x ISC BIND 9.0.x 临时解决方法： 禁止或限制递归 厂商补丁： ISC ---...

Input validation

ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 Bind Forum only allows remote attackers to cause a denial of service exit via a type ANY DNS query response that contains multiple RRsets, which triggers an assertion...

CVE-2007-0493

Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 Bind Forum only allows remote attackers to cause a denial of service named daemon crash via unspecified vectors that cause named to "dereference a freed fetch context."...

CVE-2007-0494

ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 Bind Forum only allows remote attackers to cause a denial of service exit via a type ANY DNS query response that contains multiple RRsets, which triggers an assertion...

CVE-2007-0494

ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 Bind Forum only allows remote attackers to cause a denial of service exit via a type ANY DNS query response that contains multiple RRsets, which triggers an assertion...

Design/Logic Flaw

Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 Bind Forum only allows remote attackers to cause a denial of service named daemon crash via unspecified vectors that cause named to "dereference a freed fetch context."...

CVE-2007-0493

Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 Bind Forum only allows remote attackers to cause a denial of service named daemon crash via unspecified vectors that cause named to "dereference a freed fetch context."...

CVE-2007-0494

ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 Bind Forum only allows remote attackers to cause a denial of service exit via a type ANY DNS query response that contains multiple RRsets, which triggers an assertion...

CVE-2007-0493

Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 Bind Forum only allows remote attackers to cause a denial of service named daemon crash via unspecified vectors that cause named to "dereference a freed fetch context."...

CVE-2007-0493

Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 Bind Forum only allows remote attackers to cause a denial of service named daemon crash via unspecified vectors that cause named to "dereference a freed fetch context."...

CVE-2007-0494

CVE-2007-0494 affects ISC BIND: remote attackers can cause a denial of service via a DNS response to a type ANY query that contains multiple RRsets, triggering an assertion error in DNSSEC validation. Affected software includes BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up t...

CVE-2007-0493

Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 Bind Forum only allows remote attackers to cause a denial of service named daemon crash via unspecified vectors that cause named to "dereference a freed fetch context."...

CVE-2007-0494

ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 Bind Forum only allows remote attackers to cause a denial of service exit via a type ANY DNS query response that contains multiple RRsets, which triggers an assertion...

CVE-2007-0494

ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 Bind Forum only allows remote attackers to cause a denial of service exit via a type ANY DNS query response that contains multiple RRsets, which triggers an assertion...

CVE-2007-0493

CVE-2007-0493 is a use-after-free in ISC BIND that allows remote attackers to cause a named daemon crash by dereferencing a freed fetch context. Affected BIND versions include 9.3.0–9.3.3, 9.4.0a1–9.4.0a6, 9.4.0b1–9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only). The issue stems from accessing me...

ISC BIND多个远程拒绝服务漏洞

ISC BIND是一款开放源代码的Internet域名名字系统实现。 ISC BIND在处理部分查询时存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 问题一是部分BIND版本处理递归查询时存在缺陷，远程攻击者可以发送足够数量的递归查询，如果那些查询的回应在等待它们的所有客户端离开递归队列之后到达的话，可能触发一个INSIST错误。 问题二是BIND处理DNS扩展（DNSSEC）签名的资源记录集Resource Record...