Lucene search
+L

34 matches found

OSV
OSV
added 2023/01/26 9:15 p.m.10 views

AZL-13204 CVE-2022-3094 affecting package bind for versions less than 9.16.37-2

Sending a flood of dynamic DNS updates may cause named to allocate large amounts of memory. This, in turn, may cause named to exit due to a lack of free memory. We are not aware of any cases where this has been exploited. Memory is allocated prior to the checking of access permissions ACLs and is...

7.5CVSS7AI score0.13213EPSS
SaveExploits0References1
OSV
OSV
added 2023/01/26 9:15 p.m.3 views

DEBIAN-CVE-2022-3094

Sending a flood of dynamic DNS updates may cause named to allocate large amounts of memory. This, in turn, may cause named to exit due to a lack of free memory. We are not aware of any cases where this has been exploited. Memory is allocated prior to the checking of access permissions ACLs and is...

7.5CVSS7AI score0.13213EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/09/21 9:39 a.m.4 views

CVE-2022-3080

By sending specific queries to the resolver, an attacker can cause named to crash...

7.5CVSS7.2AI score0.01627EPSS
SaveExploits0References12
RedHat Linux
RedHat Linux
added 2021/11/09 6:09 p.m.9 views

bind: Broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly

Incremental zone transfers IXFR provide a way of transferring changed portions of a zone between servers. An IXFR stream containing SOA records with an owner name other than the transferred zone's apex may cause the receiving named server to inadvertently remove the SOA record for the zone in...

6.5CVSS7.2AI score0.05989EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/04/29 12:00 a.m.7 views

ISC BIND 安全漏洞

ISC BIND is a suite of open source software that implements the DNS protocol from ISC USA. A security vulnerability exists in ISC BIND that causes the receiving named server to inadvertently delete SOA records for problematic zones from the zone database...

6.5CVSS7AI score0.05989EPSS
SaveExploits0References34
NVD
NVD
added 2019/01/16 8:29 p.m.18 views

CVE-2017-3138

named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some versions of name...

6.5CVSS6.7AI score0.05523EPSS
SaveExploits0References6
OSV
OSV
added 2019/01/16 8:29 p.m.28 views

CVE-2017-3138

named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some versions of name...

5.3CVSS6.8AI score
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2017/01/19 12:00 a.m.59 views

ISC BIND 9 < 9.9.9-P5 / 9.9.9-S7 / 9.10.4-P5 / 9.11.0-P2 Multiple DoS

According to its self-reported version number, the instance of ISC BIND 9 running on the remote name server is 9.9.x prior to 9.9.9-P5 or 9.9.9-S7, 9.10.x prior to 9.10.4-P5, or 9.11.x prior to 9.11.0-P2. It is, therefore, affected by multiple denial of service vulnerabilities : - A denial of...

7.5CVSS6.8AI score0.40556EPSS
SaveExploits0References8
Metasploit
Metasploit
added 2015/07/28 12:00 a.m.303 views

BIND TKEY Query Denial of Service

This module sends a malformed TKEY query, which exploits an error in handling TKEY queries on affected BIND9 'named' DNS servers. As a result, a vulnerable named server will exit with a REQUIRE assertion failure. This condition can be exploited in versions of BIND between BIND 9.1.0 through 9.8.x...

7.8CVSS6.9AI score0.91284EPSS
SaveExploits13
Tenable Nessus
Tenable Nessus
added 2013/03/10 12:00 a.m.36 views

CentOS 6 : bind (CESA-2013:0550)

"Updated bind packages that fix one security issue and add one enhancement are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

7.1CVSS7.2AI score0.12036EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
added 2011/05/31 2:46 p.m.7 views

bind: Large RRSIG RRsets and Negative Caching can crash named

Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service assertion failure and daemon exit via a negative response containing large RRSIG RRsets...

5CVSS6.8AI score0.24638EPSS
SaveExploits1References4
securityvulns
securityvulns
added 2010/12/06 12:00 a.m.40 views

bind named DNS server vulnerabilities

DoS, information leaks...

6.4CVSS1.7AI score0.14503EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2009/02/27 12:00 a.m.31 views

Fedora Update for bind FEDORA-2007-4658

Check for the Version of bind OpenVAS Vulnerability Test Fedora Update for bind FEDORA-2007-4658 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

7.1CVSS7.7AI score0.1309EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2008/09/04 12:00 a.m.39 views

FreeBSD Ports: bind9

The remote host is missing an update to the system as announced in the referenced advisory. VID 30e4ed7b-1ca6-11da-bc01-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

4.3CVSS6.4AI score0.06354EPSS
SaveExploits0
Rows per page
Query Builder