218 matches found
tkeypoc
PoC for CVE-2015-5477 BIND9 TKEY DoS 이 코드는 취약한 BIND9 DNS 서버를 충돌시키는 UDP 패킷을 전송합니다. elceef@osiris:/tkeypoc$ ./tkeypoc.py localhost CVE-2015-5477 BIND9 TKEY PoC Sending packet to localhost ... Done...
CVE-2020-8617
CVE-2020-8617 CVE-2020-8617에 대한 PoC 교육 목적으로만 사용하세요 실행 이 이미지는 표준 BIND 서버를 실행하며, 자동으로 tkey "local-ddns"를 생성합니다. $ docker run --rm --name cve-2020-8617 -it -p 53:53/udp knqyf263/cve-2020-8617 익스플로잇 $ pipenv install $ pipenv run python exploit.py 참고 https://kb.isc.org/docs/cve-2020-8617 저자 Teppei Fuk...
cve-2015-5477
cve-2015-5477 BIND9 TKEY assert DoS CVE-2015-5477을 위한 PoC $ ps awux | grep -v grep | grep bind bind 2373 0.0 2.2 141164 13424 ? Ssl 14:58 0:00 /var/named/chroot/sbin/named -u bind -t /var/named/chroot -c /etc/named.conf $ python tkill.py 127.0.0.1 Begin emission: ..Finished to send 1 packets...
TKEY-remote-DoS-vulnerability-exploit
TKEY-remote-DoS-vulnerability-exploit CVE-2015-5477 POC용 익스플로잇 코드...
Rocky Linux 9 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2026_24367)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202624367 advisory. bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation CVE-2026-3039 bind: BIND: Denial of Service via specially crafted DNS messages...
AlmaLinux 9.2 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-dnssec-doc / etc (ALMALINUX9.2:CLSA-2026:1780407449)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1780407449 advisory. - BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when...
cve-2015-5477
BOND9 TKEY assert DoS CVE-2015-5477 PoC 이 익스플로잇은 BIND9 서버에 취약점이 있는지 확인하기 위해, 서버가 충돌하는지 보기 위해 익스플로잇을 보냅니다. Unix/Windows에서 일반적인 방식으로 컴파일하는 C 코드입니다. 예를 들어: gcc tkill.c -o tkill IPv4와 IPv6 모두에서 실행됩니다. 다음은 localhost에 대해 실행했을 때의 모습입니다. 이름을 확인할 때 두 개의 IP 주소를 얻으므로, 둘 다 시도합니다. 먼저 "version" 문자열을 질의한 다음...
K000163415: BIND vulnerability CVE-2026-3119
Security Advisory Description Under certain conditions, named may crash when processing a correctly signed query containing a TKEY record. The affected code can only be reached if an incoming request has a valid transaction signature TSIG from a key declared in the named configuration. This issue...
SUSE CVE-2026-76163
If BIND is loaded with a "named.conf" file that contains no global "options" block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure and subsequent unexpected program exit. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and...
EulerOS Virtualization 2.10.0 : bind (EulerOS-SA-2026-3861)
According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption...
EulerOS Virtualization 2.10.1 : bind (EulerOS-SA-2026-3827)
According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption...
EulerOS Virtualization 2.12.0 : bind (EulerOS-SA-2026-3630)
According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption...
EulerOS 2.0 SP10 : bind (EulerOS-SA-2026-3682)
According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving a...
EulerOS 2.0 SP10 : bind (EulerOS-SA-2026-3730)
According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving a...
bind: BIND: Denial of Service via TKEY query with specific configuration
A flaw was found in BIND. A remote attacker can exploit this vulnerability by sending a specially crafted TKEY query to a BIND server configured without a global 'options' block in its 'named.conf' file. This can lead to an assertion failure, causing the BIND program to unexpectedly terminate. Th...
AZL-103350 CVE-2026-76163 affecting package bind 9.20.26-1
If BIND is loaded with a "named.conf" file that contains no global "options" block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure and subsequent unexpected program exit. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and...
ALPINE-CVE-2026-76163
If BIND is loaded with a "named.conf" file that contains no global "options" block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure and subsequent unexpected program exit. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and...
DEBIAN-CVE-2026-76163
If BIND is loaded with a "named.conf" file that contains no global "options" block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure and subsequent unexpected program exit. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and...
CVE-2026-76163
If BIND is loaded with a "named.conf" file that contains no global "options" block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure and subsequent unexpected program exit. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and...
CVE-2026-76163
A flaw was found in BIND. A remote attacker can exploit this vulnerability by sending a specially crafted TKEY query to a BIND server configured without a global 'options' block in its 'named.conf' file. This can lead to an assertion failure, causing the BIND program to unexpectedly terminate. Th...