ISC BIND DoS Vulnerability (CVE-2011-1907)

ISC BIND is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

The vulnerability of the sort_rrset() function in thednsmasq DNS server, related to buffer overflow in dynamic memory, allows a hacker to execute arbitrary code.

Vulnerability of sortrrset function dnssec.c: The dnsmasq DNS server is vulnerable due to a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Dnsmasq Buffer Error Vulnerability

DNSmasq is a DNS configuration tool by Simon Kelley Personal Developer. Dnsmasq suffers from a buffer error vulnerability that stems from a heap-based buffer overflow in dnsmasq that sorts an rrset before validating it with DNSSEC data in an unsolicited DNS response...

dnsmasq: heap-based buffer overflow in sort_rrset() when DNSSEC is enabled

A flaw was found in dnsmasq. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overflow with arbitrary da...

dnsmasq: heap-based buffer overflow in sort_rrset() when DNSSEC is enabled

A flaw was found in dnsmasq. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overflow with arbitrary da...

dnsmasq: heap-based buffer overflow with large memcpy in sort_rrset() when DNSSEC is enabled

A flaw was found in dnsmasq. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. This flaw allows a remote attacker, who can create valid DNS replies, to cause an overflow in a heap-allocated memory. This flaw is caused b...

openSUSE Security Update : bind (openSUSE-SU-2011:0603-1)

This update provides bind 9.7.3P1 which fixes a denial of service issue in RRsig RRSET handling. CVE-2011-1910 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update bind-4633. The text description o...

Design/Logic Flaw

ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones RPZ RRset replacement is enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit via an RRSIG query...

Remote DoS Flaw in BIND Fixed in New Version !

The Internet Systems Consortium released an advisory today informing BIND users that certain types of queries to name servers can cause the servers to crash and create a denial-of-service condition. This remotely exploitable bug only affects BIND users with the Response Policy Zones RPZ feature...

ISC BIND Response Policy Zones RRSIG Query Assertion Failure DoS

According to its self-reported version number, the remote installation of BIND is potentially affected by a denial of service vulnerability. This issue only affects BIND installations that use the RPZ feature configured for RRset replacement. When RPZ is being used, a query of type RRSIG for a na...

openSUSE Security Update : bind (openSUSE-SU-2010:1031-1)

Adding certain types of signed negative responses to cache doesn't clear any matching RRSIG records already in cache. A subsequent lookup of the cached data can cause named to crash CVE-2010-3613. bind did not properly determine the security status of an NS RRset during a DNSKEY algorithm rollove...

DEBIAN-CVE-2010-3614

named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, which might allow remote attackers to cause a denial of service DNSSEC validati...

CVE-2010-3614

named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, which might allow remote attackers to cause a denial of service DNSSEC validati...

ISC BIND DNSSEC验证远程拒绝服务漏洞

ISC BIND是一个应用非常广泛的DNS协议的实现，由ISC负责维护，具体的开发由Nominumwww.nominum.com公司来完成。 ISC BIND在处理用户请求时存在漏洞，远程攻击者可能利用此漏洞导致BIND拒绝服务。 在验证对ANY类型请求的响应时如果请求在回答会话中返回了多个RRset的话就可能触发异常处理，导致BIND拒绝服务。仅在用户通过指定可信任密钥在named.conf中启用了dnssec验证的情况下才会出现这个漏洞。 ISC BIND 9.5.0a1 ISC BIND 9.4.x ISC BIND 9.3.x ISC BIND 9.2.x ISC BIND...

bind DNS server DoS

assert on multiple RRset records, crash on multiple recursive queries...

FreeBSD-SA-06:20.bind

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:20.bind Security Advisory The FreeBSD Project Topic: Denial of Service in named8 Category: contrib Module: bind Announced: 2006-09-06 Credits: The Measurement...