Lucene search
+L

11 matches found

AlpineLinux
AlpineLinux
•added 2019/10/09 2:17 p.m.•41 views

CVE-2019-6471

A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 - 9.11.7, 9.12.0 - 9.12.4-P1, 9.14.0 - 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of...

5.9CVSS6AI score0.03298EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/10/09 2:17 p.m.•71 views

CVE-2019-6471

A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 - 9.11.7, 9.12.0 - 9.12.4-P1, 9.14.0 - 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of...

5.9CVSS6.4AI score0.03298EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/09 12:00 a.m.•2 views

CVE-2019-6471: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 - 9.11.7, 9.12.0 - 9.12.4-P1, 9.14.0 - 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of...

5.9CVSS6.5AI score0.03298EPSS
SaveExploits0References3
OSV
OSV
•added 2019/06/19 12:00 a.m.•15 views

UBUNTU-CVE-2019-6471

A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 - 9.11.7, 9.12.0 - 9.12.4-P1, 9.14.0 - 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of...

5.9CVSS6.6AI score0.03298EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/16 12:00 a.m.•5 views

CVE-2017-3138: Reachable Assertion

named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some versions of name...

6.5CVSS5.7AI score0.05523EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2016/01/26 12:00 a.m.•115 views

ISC BIND 9.3.0 < 9.9.8-P3 / 9.9.x-Sx < 9.9.8-S4 / 9.10.x < 9.10.3-P3 Multiple DoS

According to its self-reported version number, the installation of ISC BIND running on the remote name server is affected by multiple denial of service vulnerabilities : - A denial of service vulnerability exists due to improper handling of certain string formatting options. An authenticated,...

7CVSS6.8AI score0.20328EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2015/12/17 12:00 a.m.•39 views

Debian DLA-370-1 : bind9 security update

It was discovered that the BIND DNS server does not properly handle the parsing of incoming responses, allowing some records with an incorrect class to be accepted by BIND instead of being rejected as malformed. This can trigger a REQUIRE assertion failure when those records are subsequently...

5CVSS6.9AI score0.5469EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/12/16 12:00 a.m.•4 views

CVE-2015-8000: Improper Input Validation

db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit via a malformed class attribute...

5CVSS7AI score0.5469EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2015/08/18 12:00 a.m.•32 views

AIX 5.3 TL 12 : bind9 (IV75966)

ISC BIND is vulnerable to a denial of service, caused by an error in the handling of TKEY queries. By sending specially-crafted packets, a remote attacker could exploit this vulnerability to cause a REQUIRE assertion failure. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the...

7.8CVSS6.8AI score0.91284EPSS
SaveExploits13References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/07/29 12:00 a.m.•3 views

CVE-2015-5477: Undefined Security Weakness

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit via TKEY queries...

7.8CVSS7AI score0.91284EPSS
SaveExploits13References2
Metasploit
Metasploit
•added 2015/07/28 12:00 a.m.•310 views

BIND TKEY Query Denial of Service

This module sends a malformed TKEY query, which exploits an error in handling TKEY queries on affected BIND9 'named' DNS servers. As a result, a vulnerable named server will exit with a REQUIRE assertion failure. This condition can be exploited in versions of BIND between BIND 9.1.0 through 9.8.x...

7.8CVSS6.9AI score0.91284EPSS
SaveExploits13
Rows per page
Query Builder