Lucene search
+L

69 matches found

OSV
OSV
added 2020/08/21 11:29 a.m.7 views

USN-4468-1 bind9 vulnerabilities

Emanuel Almeida discovered that Bind incorrectly handled certain TCP payloads. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. CVE-2020-8620 Joseph Gullo discovered that Bind incorrectly handled...

7.5CVSS6.9AI score0.06348EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2020/08/21 2:38 a.m.23 views

CVE-2020-8621

In BIND 9.14.0 - 9.16.5, 9.17.0 - 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that 'forward only' are not affected...

7.5CVSS3.6AI score0.02944EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2020/08/20 12:0 a.m.25 views

CVE-2020-8621

In BIND 9.14.0 - 9.16.5, 9.17.0 - 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that 'forward only' are not affected...

7.5CVSS6.7AI score0.02944EPSS
Exploits0References3
OSV
OSV
added 2020/08/20 12:0 a.m.4 views

UBUNTU-CVE-2020-8621

In BIND 9.14.0 - 9.16.5, 9.17.0 - 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that 'forward only' are not affected...

7.5CVSS6.7AI score0.02944EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2019/10/25 12:0 a.m.44 views

ISC BIND 9.14.x < 9.14.7 / 9.15.x < 9.15.5 Multiple Vulnerabilities

ISC BIND versions 9.14.6 / 9.15.4 and earlier are affected by multiple vulnerabilities. - A flaw in mirror zone validity checking. It can allow zone data to be spoofed. CVE-2019-6475 - A defect in code added to support QNAME minimization can cause named to exit with an assertion failure if a...

7.5CVSS6.6AI score0.02883EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2019/10/17 9:51 p.m.24 views

CVE-2019-6476

A defect in code added to support QNAME minimization can cause named to exit with an assertion failure if a forwarder returns a referral rather than resolving the query. This affects BIND versions 9.14.0 up to 9.14.6, and 9.15.0 up to 9.15.4...

7.5CVSS3.1AI score0.02883EPSS
Exploits0References4
NVD
NVD
added 2019/10/17 8:15 p.m.27 views

CVE-2019-6476

A defect in code added to support QNAME minimization can cause named to exit with an assertion failure if a forwarder returns a referral rather than resolving the query. This affects BIND versions 9.14.0 up to 9.14.6, and 9.15.0 up to 9.15.4...

7.5CVSS6.4AI score0.02883EPSS
Exploits0References3
OSV
OSV
added 2019/10/17 8:15 p.m.3 views

ALPINE-CVE-2019-6476

A defect in code added to support QNAME minimization can cause named to exit with an assertion failure if a forwarder returns a referral rather than resolving the query. This affects BIND versions 9.14.0 up to 9.14.6, and 9.15.0 up to 9.15.4...

7.5CVSS7.1AI score0.02883EPSS
Exploits0References1
OSV
OSV
added 2019/10/17 8:15 p.m.21 views

CVE-2019-6476

A defect in code added to support QNAME minimization can cause named to exit with an assertion failure if a forwarder returns a referral rather than resolving the query. This affects BIND versions 9.14.0 up to 9.14.6, and 9.15.0 up to 9.15.4...

7.5CVSS7.2AI score0.02883EPSS
Exploits0References3
Prion
Prion
added 2019/10/17 8:15 p.m.20 views

Design/Logic Flaw

A defect in code added to support QNAME minimization can cause named to exit with an assertion failure if a forwarder returns a referral rather than resolving the query. This affects BIND versions 9.14.0 up to 9.14.6, and 9.15.0 up to 9.15.4...

5CVSS7.3AI score0.02883EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2019/10/17 7:17 p.m.116 views

CVE-2019-6476

CVE-2019-6476 describes a defect in the QNAME minimization code in BIND that can cause named to exit with an assertion failure when a forwarder returns a referral instead of resolving the query. Affected products/versions: BIND 9.14.0–9.14.6 and 9.15.0–9.15.4. The description does not provide a f...

7.5CVSS6.4AI score0.02883EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2019/10/17 7:17 p.m.36 views

CVE-2019-6476 An error in QNAME minimization code can cause BIND to exit with an assertion failure

A defect in code added to support QNAME minimization can cause named to exit with an assertion failure if a forwarder returns a referral rather than resolving the query. This affects BIND versions 9.14.0 up to 9.14.6, and 9.15.0 up to 9.15.4...

5.9CVSS7.5AI score0.02883EPSS
Exploits0References3
AlpineLinux
AlpineLinux
added 2019/10/17 7:17 p.m.64 views

CVE-2019-6476

A defect in code added to support QNAME minimization can cause named to exit with an assertion failure if a forwarder returns a referral rather than resolving the query. This affects BIND versions 9.14.0 up to 9.14.6, and 9.15.0 up to 9.15.4...

7.5CVSS6.6AI score0.02883EPSS
Exploits0
Debian CVE
Debian CVE
added 2019/10/17 7:17 p.m.55 views

CVE-2019-6476

A defect in code added to support QNAME minimization can cause named to exit with an assertion failure if a forwarder returns a referral rather than resolving the query. This affects BIND versions 9.14.0 up to 9.14.6, and 9.15.0 up to 9.15.4...

7.5CVSS6.5AI score0.02883EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2019/10/16 12:0 a.m.30 views

CVE-2019-6476

A defect in code added to support QNAME minimization can cause named to exit with an assertion failure if a forwarder returns a referral rather than resolving the query. This affects BIND versions 9.14.0 up to 9.14.6, and 9.15.0 up to 9.15.4...

7.5CVSS6.8AI score0.02883EPSS
Exploits0References1
OSV
OSV
added 2018/01/23 3:29 p.m.3 views

DEBIAN-CVE-2017-15092

A cross-site scripting issue has been found in the web interface of PowerDNS Recursor from 4.0.0 up to and including 4.0.6, where the qname of DNS queries was displayed without any escaping, allowing a remote attacker to inject HTML and Javascript code into the web interface, altering the content...

6.1CVSS8.3AI score0.02275EPSS
Exploits0References1
OSV
OSV
added 2018/01/23 3:29 p.m.3 views

UBUNTU-CVE-2017-15092

A cross-site scripting issue has been found in the web interface of PowerDNS Recursor from 4.0.0 up to and including 4.0.6, where the qname of DNS queries was displayed without any escaping, allowing a remote attacker to inject HTML and Javascript code into the web interface, altering the content...

6.1CVSS6.5AI score0.02275EPSS
Exploits0References4
NVD
NVD
added 2016/09/21 2:25 p.m.16 views

CVE-2016-5426

PowerDNS aka pdns Authoritative Server before 3.4.10 allows remote attackers to cause a denial of service backend CPU consumption via a long qname...

7.5CVSS7.3AI score0.30631EPSS
Exploits0References6
OSV
OSV
added 2016/09/21 2:25 p.m.9 views

CVE-2016-5426

PowerDNS aka pdns Authoritative Server before 3.4.10 allows remote attackers to cause a denial of service backend CPU consumption via a long qname...

7.5CVSS7.3AI score
Exploits0References6
OSV
OSV
added 2016/09/21 2:25 p.m.1 views

DEBIAN-CVE-2016-5426

PowerDNS aka pdns Authoritative Server before 3.4.10 allows remote attackers to cause a denial of service backend CPU consumption via a long qname...

7.5CVSS7.1AI score0.30631EPSS
Exploits0References1
Rows per page
Query Builder