Lucene search
K

19 matches found

Veracode
Veracode
added 2022/09/23 9:29 a.m.28 views

Denial Of Service (DoS)

libbind9.so is vulnerable to denial of service. The vulnerability exists in multiple functions in query.c due to serve-stale-client-timeout which allows an attacker to cause an application crash by sending specific queries to the resolver...

7.5CVSS7.2AI score0.00136EPSS
Exploits0References16Affected Software5
OpenVAS
OpenVAS
added 2020/02/25 12:0 a.m.24 views

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2020-1141)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7AI score0.17224EPSS
Exploits0References2
OSV
OSV
added 2019/10/09 4:15 p.m.19 views

CVE-2019-6467

A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most likely scenario where this might occur is if the server, in addition to performing NXDOMAI...

7.5CVSS6.4AI score0.17224EPSS
Exploits0References2
NVD
NVD
added 2019/10/09 4:15 p.m.14 views

CVE-2019-6467

A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most likely scenario where this might occur is if the server, in addition to performing NXDOMAI...

7.5CVSS6.5AI score0.17224EPSS
Exploits0References2
Prion
Prion
added 2019/10/09 4:15 p.m.22 views

Design/Logic Flaw

A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most likely scenario where this might occur is if the server, in addition to performing NXDOMAI...

5CVSS7.3AI score0.17224EPSS
Exploits0References2Affected Software1
AlpineLinux
AlpineLinux
added 2019/10/09 2:17 p.m.28 views

CVE-2019-6467

A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most likely scenario where this might occur is if the server, in addition to performing NXDOMAI...

7.5CVSS6.5AI score0.17224EPSS
Exploits0
CVE
CVE
added 2019/10/09 2:17 p.m.97 views

CVE-2019-6467

CVE-2019-6467 affects BIND's nxdomain-redirect feature. A programming error can trigger an assertion failure in query.c when the alternate namespace used for NXDOMAIN redirection is a descendant of a locally served zone. Affected: BIND 9.12.0–9.12.4, 9.14.0, and all 9.13 development releases. Con...

7.5CVSS6.3AI score0.17224EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/10/09 2:17 p.m.17 views

CVE-2019-6467 An error in the nxdomain redirect feature can cause BIND to exit with an INSIST assertion failure in query.c

A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most likely scenario where this might occur is if the server, in addition to performing NXDOMAI...

5.9CVSS7.4AI score0.17224EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2019/04/24 12:0 a.m.21 views

CVE-2019-6467

A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most likely scenario where this might occur is if the server, in addition to performing NXDOMAI...

7.5CVSS6.5AI score0.17224EPSS
Exploits0References1
OSV
OSV
added 2019/04/24 12:0 a.m.1 views

UBUNTU-CVE-2019-6467

A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most likely scenario where this might occur is if the server, in addition to performing NXDOMAI...

7.5CVSS6.8AI score0.17224EPSS
Exploits0References2
CVE
CVE
added 2014/01/14 2:0 a.m.361 views

CVE-2014-0591

CVE-2014-0591 affects ISC BIND 9.6, 9.7, 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2 (and 9.6-ESV before 9.6-ESV-R10-P2) where the query_findclosestnsec3 function in query.c can be triggered by crafted DNS queries to an authoritative server using NSEC3 signing. The result is a denial of service m...

2.6CVSS5.8AI score0.51542EPSS
Exploits1References32Affected Software1
Prion
Prion
added 2012/07/27 10:27 a.m.9 views

Null pointer dereference

query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service NULL pointer dereference and child process crash via a crafted DNS packet...

5CVSS6.8AI score0.01384EPSS
Exploits0References7Affected Software1
Tenable Nessus
Tenable Nessus
added 2011/11/17 12:0 a.m.22 views

ISC BIND 9 'Query.c' Logging Resolver DoS

Binary data 6093.prm...

5CVSS7.3AI score0.06865EPSS
Exploits0References6
FreeBSD
FreeBSD
added 2011/11/16 12:0 a.m.26 views

BIND -- Remote DOS

The Internet Systems Consortium reports: Organizations across the Internet reported crashes interrupting service on BIND 9 nameservers performing recursive queries. Affected servers crashed after logging an error in query.c with the following message: "INSIST! dnsrdatasetisassociatedsigrdataset"...

5CVSS8.6AI score0.06865EPSS
Exploits0References2
NVD
NVD
added 2009/05/22 11:52 a.m.13 views

CVE-2009-1755

Off-by-one error in the packetreadquerysection function in packet.c in nsd 3.2.1, and processquerysection in query.c in nsd 2.3.7, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors that trigger a buffer overflow...

5CVSS7.8AI score0.01792EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2009/05/22 1:0 a.m.12 views

CVE-2009-1755

Off-by-one error in the packetreadquerysection function in packet.c in nsd 3.2.1, and processquerysection in query.c in nsd 2.3.7, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors that trigger a buffer overflow...

5CVSS7.5AI score0.01792EPSS
Exploits0
Prion
Prion
added 2007/05/02 10:19 a.m.20 views

Design/Logic Flaw

Unspecified vulnerability in query.c in ISC BIND 9.4.0, and 9.5.0a1 through 9.5.0a3, when recursion is enabled, allows remote attackers to cause a denial of service daemon exit via a sequence of queries processed by the queryaddsoa function...

7.1CVSS6.6AI score0.03461EPSS
Exploits0References9Affected Software1
CVE
CVE
added 2007/05/02 10:0 a.m.77 views

CVE-2007-2241

Summary (CVE-2007-2241) : An unspecified vulnerability in query.c of ISC BIND 9.4.0 and 9.5.0a1–9.5.0a3, when recursion is enabled, allows remote attackers to cause a denial of service (daemon exit) by issuing a crafted sequence of queries to the resolver. The issue is specifically tied to the qu...

7.1CVSS8.1AI score0.03461EPSS
Exploits0References9Affected Software1
Tenable Nessus
Tenable Nessus
added 2007/05/01 12:0 a.m.15 views

ISC BIND 9 'query.c' Function Unspecified Recursive Query DoS

Binary data 3978.prm...

7.1CVSS7.3AI score0.03461EPSS
Exploits0References5
Rows per page
Query Builder