[SECURITY] Fedora 25 Update: bind-9.10.4-2.P4.fc25

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

bind: assertion failure while handling responses containing a DNAME answer

A denial of service flaw was found in the way BIND handled responses containing a DNAME answer. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

glibc: Stack overflow in nss_dns_getnetbyname_r

A stack overflow vulnerability was found in nssdnsgetnetbynamer. On systems with nsswitch configured to include "networks: dns" with a privileged or network-facing service that would attempt to resolve user-provided network names, an attacker could provide an excessively long network name,...

USN-3119-1 bind9 vulnerability

Tony Finch and Marco Davids discovered that Bind incorrectly handled certain responses containing a DNAME answer. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service...

bind: assertion failure in buffer.c while building responses to a specifically constructed request

A denial of service flaw was found in the way BIND constructed a response to a query that met certain criteria. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS request packet...

[SECURITY] Fedora 23 Update: bind99-9.9.9-2.P3.fc23

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP...

bind: assertion failure triggered by a packet with malformed options

A denial of service flaw was found in the way BIND handled packets with malformed options. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS packet...

bind: assertion failure triggered by a packet with malformed options

A denial of service flaw was found in the way BIND handled packets with malformed options. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS packet...

The vulnerability of the Mac OS X operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the mDNSResponder component in the Mac OS X operating system is related to the use of DNS proxies to listen to all interfaces when using VMnet.framework. Exploiting this vulnerability allows a malicious actor to obtain confidential information by sending DNS requests to...

[SECURITY] Fedora 25 Update: bind-9.10.4-2.P3.fc25

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

[SECURITY] Fedora 25 Update: bind99-9.9.9-2.P3.fc25

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP...

[SECURITY] Fedora 24 Update: bind99-9.9.9-2.P3.fc24

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP...

Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2016-08389)

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices.DNS Forwarder is one of the DNS forwarder components. A denial of service vulnerability exists in the DNS Forwarder feature in Cisco IOS and IOS XE Software. A remote attacker could exploit this...

bind: assertion failure in buffer.c while building responses to a specifically constructed request

A denial of service flaw was found in the way BIND constructed a response to a query that met certain criteria. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS request packet...

Apple OS X mDNSResponder Information Disclosure Vulnerability

Apple OS X is a suite of specialized operating systems developed by Apple for Mac computers. mDNSResponder is a component that provides unicast and multicast mDNS service. An information disclosure vulnerability exists in mDNSResponder in versions of Apple OS X prior to 10.12, which can be...

USN-3088-1 bind9 vulnerability

It was discovered that Bind incorrectly handled building responses to certain specially crafted requests. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service...

CVE-2016-4739

mDNSResponder in Apple OS X before 10.12, when VMnet.framework is used, arranges for a DNS proxy to listen on all interfaces, which allows remote attackers to obtain sensitive information by sending a DNS query to an unintended interface...

UBUNTU-CVE-2016-4760

WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to conduct DNS rebinding attacks against non-HTTP Safari sessions by leveraging HTTP/0.9 support...

Arbitrary Command Execution Vulnerability in Intelligent DNS System of Zhengzhou Glacier Network Technology Co.

Zhengzhou Glacier Networks Technology Co., Ltd Glacier Networks is a provider of embedded software product development and network application layer management equipment. An arbitrary command execution vulnerability exists in the Intelligent DNS system of Zhengzhou Glacier Network Technology Co. ...

MiniUPnP DNS Rebind Vulnerability

The remote host is running a version of MiniUPnP that is affected by an unspecified flaw that exists in the Domain Name System DNS related to the 'rebinding' interaction. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a specially crafted web page, to run a...