Lucene search
K

22 matches found

FreeBSD Advisory
FreeBSD Advisory
added 2015/07/07 12:0 a.m.18 views

FreeBSD-SA-15:11.bind

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-15:11.bind Security Advisory The FreeBSD Project Topic: BIND resolver remote denial of service when validating Category: contrib Module: bind Announced:...

7.8CVSS7.2AI score0.27161EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2013/04/14 12:0 a.m.37 views

FreeBSD : FreeBSD -- Multiple Denial of Service vulnerabilities with named(8) (4b79538b-a450-11e2-9898-001060e06fd4)

Problem description : The BIND daemon would crash when a query is made on a resource record with RDATA that exceeds 65535 bytes. The BIND daemon would lock up when a query is made on specific combinations of RDATA. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

7.8CVSS6.7AI score0.58236EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2013/02/22 12:0 a.m.27 views

FreeBSD : FreeBSD -- BIND remote DoS with deliberately crafted DNS64 query (4671cdc9-7c6d-11e2-809b-6c626d99876c)

Problem description : Due to a software defect a crafted query can cause named8 to crash with an assertion failure. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018...

7.8CVSS7.2AI score0.07927EPSS
Exploits1References2
FreeBSD Advisory
FreeBSD Advisory
added 2012/11/22 12:0 a.m.17 views

FreeBSD-SA-12:06.bind

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-12:06.bind Security Advisory The FreeBSD Project Topic: Multiple Denial of Service vulnerabilities with named8 Category: contrib Module: bind Announced: 2012-11-2...

7.8CVSS7AI score0.58236EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2012/08/07 12:0 a.m.39 views

FreeBSD : FreeBSD -- named(8) DNSSEC validation Denial of Service (0f020b7b-e033-11e1-90a2-000c299b62e1)

Problem description : BIND 9 stores a cache of query names that are known to be failing due to misconfigured name servers or a broken chain of trust. Under high query loads, when DNSSEC validation is active, it is possible for a condition to arise in which data from this cache of failing queries...

7.8CVSS6.7AI score0.06693EPSS
Exploits1References2
FreeBSD Advisory
FreeBSD Advisory
added 2012/08/06 12:0 a.m.16 views

FreeBSD-SA-12:05.bind

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-12:05.bind Security Advisory The FreeBSD Project Topic: named8 DNSSEC validation Denial of Service Category: contrib Module: bind Announced: 2012-08-06 Credits:...

7.8CVSS7AI score0.06693EPSS
Exploits1
FreeBSD
FreeBSD
added 2012/07/24 12:0 a.m.24 views

FreeBSD -- named(8) DNSSEC validation Denial of Service

Problem description: BIND 9 stores a cache of query names that are known to be failing due to misconfigured name servers or a broken chain of trust. Under high query loads, when DNSSEC validation is active, it is possible for a condition to arise in which data from this cache of failing queries...

7.8CVSS8.5AI score0.06693EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2012/06/28 12:0 a.m.32 views

FreeBSD : FreeBSD -- Incorrect handling of zero-length RDATA fields in named(8) (fc5231b6-c066-11e1-b5e0-000c299b62e1)

Problem description : The named8 server does not properly handle DNS resource records where the RDATA field is zero length, which may cause various issues for the servers handling them. Resolving servers may crash or disclose some portion of memory to the client. Authoritative servers may crash o...

8.5CVSS6.7AI score0.53159EPSS
Exploits1References2
FreeBSD Advisory
FreeBSD Advisory
added 2012/06/12 12:0 a.m.19 views

FreeBSD-SA-12:03.bind

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-12:03.bind Security Advisory The FreeBSD Project Topic: Incorrect handling of zero-length RDATA fields in named8 Category: contrib Module: bind Announced:...

8.5CVSS6.8AI score0.53159EPSS
Exploits1
FreeBSD
FreeBSD
added 2012/06/12 12:0 a.m.34 views

FreeBSD -- Incorrect handling of zero-length RDATA fields in named(8)

Problem description: The named8 server does not properly handle DNS resource records where the RDATA field is zero length, which may cause various issues for the servers handling them. Resolving servers may crash or disclose some portion of memory to the client. Authoritative servers may crash on...

8.5CVSS8.7AI score0.53159EPSS
Exploits1
FreeBSD Advisory
FreeBSD Advisory
added 2011/09/28 12:0 a.m.16 views

FreeBSD-SA-11:03.bind

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-11:03.bind Security Advisory The FreeBSD Project Topic: Remote packet Denial of Service against named8 servers Category: contrib Module: bind Announced: 2011-09-2...

5CVSS7.1AI score0.24783EPSS
Exploits1
FreeBSD Advisory
FreeBSD Advisory
added 2010/01/06 12:0 a.m.16 views

FreeBSD-SA-10:01.bind

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-10:01.bind Security Advisory The FreeBSD Project Topic: BIND named8 cache poisoning with DNSSEC validation Category: contrib Module: bind Announced: 2010-01-06...

2.6CVSS7AI score0.20044EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2009/08/03 12:0 a.m.14 views

FreeBSD : BIND -- Dynamic update message remote DoS (83725c91-7c7e-11de-9672-00e0815b8da8)

When named8 receives a specially crafted dynamic update message an internal assertion check is triggered which causes named8 to exit. To trigger the problem, the dynamic update message must contains a record of type 'ANY' and at least one resource record set RRset for this fully qualified domain...

4.3CVSS6.1AI score0.33301EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2009/07/29 12:0 a.m.39 views

FreeBSD Security Advisory (FreeBSD-SA-09:12.bind.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-09:12.bind.asc ADV FreeBSD-SA-09:12.bind.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-09:12.bind.asc Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

4.3CVSS0.2AI score0.33301EPSS
Exploits1
OpenVAS
OpenVAS
added 2008/09/04 12:0 a.m.26 views

FreeBSD Security Advisory (FreeBSD-SA-06:20.bind.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:20.bind.asc ADV FreeBSD-SA-06:20.bind.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

5CVSS0.3AI score0.04881EPSS
Exploits1
OpenVAS
OpenVAS
added 2008/09/04 12:0 a.m.25 views

FreeBSD Security Advisory (FreeBSD-SA-07:07.bind.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-07:07.bind.asc ADV FreeBSD-SA-07:07.bind.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

4.3CVSS7.7AI score0.2056EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2007/08/02 12:0 a.m.17 views

FreeBSD : FreeBSD -- Predictable query ids in named(8) (3de342fb-40be-11dc-aeac-02e0185f8d72)

When named8 is operating as a recursive DNS server or sending NOTIFY requests to slave DNS servers, named8 uses a predictable query id. Impact : An attacker who can see the query id for some requests sent by named8 is likely to be able to perform DNS cache poisoning by predicting the query id for...

4.3CVSS6.5AI score0.2056EPSS
Exploits0References2
FreeBSD
FreeBSD
added 2007/07/24 12:0 a.m.27 views

FreeBSD -- Predictable query ids in named(8)

Problem Description: When named8 is operating as a recursive DNS server or sending NOTIFY requests to slave DNS servers, named8 uses a predictable query id. Impact: An attacker who can see the query id for some requests sent by named8 is likely to be able to perform DNS cache poisoning by...

4.3CVSS7.8AI score0.2056EPSS
Exploits0
FreeBSD Advisory
FreeBSD Advisory
added 2007/02/09 12:0 a.m.16 views

FreeBSD-SA-07:02.bind

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-07:02.bind Security Advisory The FreeBSD Project Topic: Multiple Denial of Service vulnerabilities in named8 Category: contrib Module: bind Announced: 2007-02-09...

7.8CVSS5.8AI score0.41543EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2006/12/30 12:0 a.m.29 views

FreeBSD : bind9 -- Denial of Service in named(8) (ef3306fc-8f9b-11db-ab33-000e0c2e438a)

Problem Description For a recursive DNS server, a remote attacker sending enough recursive queries for the replies to arrive after all the interested clients have left the recursion queue will trigger an INSIST failure in the named8 daemon. Also for a recursive DNS server, an assertion failure ca...

7.5CVSS6.7AI score0.19584EPSS
Exploits1References3
Rows per page
Query Builder