ISC BIND 9 Response Policy Zones (RPZ) DNAME / CNAME Parsing Remote DoS

Binary data 5981.prm...

ISC BIND Response Policy Zones (RPZ) DNAME / CNAME Parsing Remote DoS

According to its self-reported version number, the remote installation of BIND is potentially affected by a denial of service vulnerability. If an attacker sends a specially crafted request to a BIND server that has recursion enabled and Response Policy Zones RPZ configured, it may cause the name...

FreeBSD : BIND -- Remote DoS against authoritative and recursive servers (fd64188d-a71d-11e0-89b4-001ec9578670)

ISC reports : A defect in the affected BIND 9 versions allows an attacker to remotely cause the 'named' process to exit using a specially crafted packet. This defect affects both recursive and authoritative servers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

FreeBSD : BIND -- Remote DoS with certain RPZ configurations (4ccee784-a721-11e0-89b4-001ec9578670)

ISC reports : Two defects were discovered in ISC's BIND 9.8 code. These defects only affect BIND 9.8 servers which have recursion enabled and which use a specific feature of the software known as Response Policy Zones RPZ and where the RPZ zone contains a specific rule/action pattern. %NASLMINLEV...

BIND -- Remote DoS against authoritative and recursive servers

ISC reports: A defect in the affected BIND 9 versions allows an attacker to remotely cause the "named" process to exit using a specially crafted packet. This defect affects both recursive and authoritative servers...

CVE-2011-2641: Undefined Security Weakness

Opera 11.11 allows remote attackers to cause a denial of service application crash by setting the FACE attribute of a FONT element within an IFRAME element after changing the SRC attribute of this IFRAME element to an about:blank value...

CVE-2011-2619: Undefined Security Weakness

Opera before 11.50 allows remote attackers to cause a denial of service application crash via a gradient with many stops, related to the implementation of CANVAS elements, SVG, and Cascading Style Sheets CSS...

CVE-2011-2618: Undefined Security Weakness

Opera before 11.50 allows remote attackers to cause a denial of service application crash via web script that moves a 1 AUDIO element or 2 VIDEO element between windows...

CVE-2011-2636: Undefined Security Weakness

Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service application crash via unknown content on a web page, as demonstrated by a certain Tomato Firmware page...

PT-2011-3967

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.50 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, by utilizing web script to move either an AUDIO element or a VIDEO element between windows...

PT-2011-3968

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.50 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is related to the implementation of CANVAS elements, SVG, and Cascading Style Sheets CSS,...

CVE-2011-2346

Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG fonts...

PT-2011-3787

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 12.0.742.112 Description A use-after-free issue allows remote attackers to cause a denial of service or possibly have other unspecified impacts via vectors involving SVG fonts. Recommendations For versions prior...

PT-2011-3792

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 12.0.742.112 Description A use-after-free issue allows remote attackers to cause a denial of service or possibly have other unspecified impacts via vectors involving SVG use elements. Recommendations For version...

CVE-2011-2188: Undefined Security Weakness

LuaExpat before 1.2.0 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564...

CVE-2011-1924

Buffer overflow in the policysummarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service directory authority crash via a crafted policy that triggers creation of a long port list...

CVE-2011-1818

Use-after-free vulnerability in the image loader in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2011-1817

Google Chrome before 12.0.742.91 does not properly implement history deletion, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

CVE-2011-1809

Use-after-free vulnerability in the accessibility feature in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2011-2174

Double free vulnerability in the tvbuncompress function in epan/tvbuff.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service application crash via a packet with malformed data that uses zlib compression...