Lucene search
K

23 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:5 a.m.1 views

SUSE CVE-2016-2775

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service daemon crash via a long request that uses the lightweight resolver protocol...

5.9CVSS6.9AI score0.43295EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 4:57 a.m.2 views

SUSE CVE-2016-7993

A bug in util-print.c:reltsprint in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM...

9.8CVSS7.6AI score0.00877EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2019/08/12 12:0 a.m.31 views

NewStart CGSL MAIN 4.05 : bind Multiple Vulnerabilities (NS-SA-2019-0102)

The remote NewStart CGSL host, running version MAIN 4.05, has bind packages installed that are affected by multiple vulnerabilities: - A flaw was found in the way BIND handled TSIG authentication for dynamic updates. A remote attacker able to communicate with an authoritative BIND server could us...

7.5CVSS6.4AI score0.48516EPSS
Exploits1References7
RedHat Linux
RedHat Linux
added 2017/08/24 5:24 a.m.1 views

bind: Too long query name causes segmentation fault in lwresd

It was found that the lightweight resolver protocol implementation in BIND could enter an infinite recursion and crash when asked to resolve a query name which, when combined with a search list entry, exceeds the maximum allowable length. A remote attacker could use this flaw to crash lwresd or...

5.9CVSS6.8AI score0.43295EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2017/08/01 2:30 p.m.2 views

bind: Too long query name causes segmentation fault in lwresd

It was found that the lightweight resolver protocol implementation in BIND could enter an infinite recursion and crash when asked to resolve a query name which, when combined with a search list entry, exceeds the maximum allowable length. A remote attacker could use this flaw to crash lwresd or...

5.9CVSS6.8AI score0.43295EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2017/02/27 12:0 a.m.39 views

EulerOS 2.0 SP1 : bind (EulerOS-SA-2016-1052)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote...

7.8CVSS6.8AI score0.8745EPSS
Exploits7References3
Prion
Prion
added 2017/01/28 1:59 a.m.28 views

Buffer overflow

A bug in util-print.c:reltsprint in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM...

7.5CVSS7.4AI score0.00877EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2017/01/28 1:59 a.m.30 views

CVE-2016-7993

A bug in util-print.c:reltsprint in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM...

9.8CVSS9.7AI score
Exploits0References6
AlpineLinux
AlpineLinux
added 2017/01/28 1:33 a.m.45 views

CVE-2016-7993

A bug in util-print.c:reltsprint in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM...

9.8CVSS9.8AI score0.00877EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2017/01/27 12:0 a.m.23 views

CVE-2016-7993

A bug in util-print.c:reltsprint in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM...

9.8CVSS6.9AI score0.00877EPSS
Exploits0References3
OSV
OSV
added 2017/01/27 12:0 a.m.0 views

UBUNTU-CVE-2016-7993

A bug in util-print.c:reltsprint in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM...

9.8CVSS7.6AI score0.00877EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2016/10/26 12:0 a.m.28 views

Amazon Linux: Security Advisory (ALAS-2016-745)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6.3AI score0.43295EPSS
Exploits0References2
Check Point Advisories
Check Point Advisories
added 2016/09/15 12:0 a.m.4 views

ISC BIND lwresd Query Name Denial of Service (CVE-2016-2775)

A denial-of-service vulnerability exists in ISC BIND. The vulnerability is due to failure to check the query length when using lightweight resolver protocol. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted queries potentially leading to denial-of-service...

4.3CVSS2.9AI score0.43295EPSS
Exploits0
OpenVAS
OpenVAS
added 2016/08/05 12:0 a.m.24 views

ISC BIND 'lightweight resolver protocol' Denial of Service Vulnerability

ISC BIND is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; ifdescription...

5.9CVSS6AI score0.43295EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2016/07/21 12:0 a.m.50 views

ISC BIND 9.x < 9.9.9-P2 / 9.10.x < 9.10.4-P2 / 9.11.0a3 < 9.11.0b2 lwres Query DoS

According to its self-reported version number, the installation of ISC BIND running on the remote name server is 9.x prior to 9.9.9-P2, 9.10.x prior to 9.10.4-P2, or 9.11.0a3 prior to 9.11.0b2. It is, therefore, affected by an error in the lightweight resolver lwres protocol implementation when...

5.9CVSS6.6AI score0.43295EPSS
Exploits0References2
ArchLinux
ArchLinux
added 2016/07/20 12:0 a.m.33 views

bind: denial of service

Although not commonly used, the BIND package contains provisions to allow systems to resolve names using the lightweight resolver protocol, a protocol similar to but distinct from the normal DNS protocols. The lightweight resolver protocol can be used either by running the lwresd utility installe...

4.3CVSS2AI score0.43295EPSS
Exploits0References2
OSV
OSV
added 2016/07/19 10:59 p.m.8 views

CVE-2016-2775

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service daemon crash via a long request that uses the lightweight resolver protocol...

5.9CVSS5.7AI score0.43295EPSS
Exploits0References16
Prion
Prion
added 2016/07/19 10:59 p.m.24 views

Design/Logic Flaw

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service daemon crash via a long request that uses the lightweight resolver protocol...

4.3CVSS6.9AI score0.43295EPSS
Exploits0References16Affected Software9
OSV
OSV
added 2016/07/19 10:59 p.m.1 views

DEBIAN-CVE-2016-2775

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service daemon crash via a long request that uses the lightweight resolver protocol...

5.9CVSS6.8AI score0.43295EPSS
Exploits0References1
OSV
OSV
added 2016/07/19 10:59 p.m.0 views

UBUNTU-CVE-2016-2775

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service daemon crash via a long request that uses the lightweight resolver protocol...

5.9CVSS6.9AI score0.43295EPSS
Exploits0References4
Rows per page
Query Builder