122 matches found
UBUNTU-CVE-2019-13952
The setipv6 function in zscanrfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data...
CVE-2019-13952
The setipv6 function in zscanrfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data...
CVE-2019-13952
The setipv6 function in zscanrfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data...
CVE-2019-13952
The setipv6 function in zscanrfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data...
CVE-2019-13952
The setipv6 function in zscanrfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data...
CVE-2019-13951
The setipv4 function in zscanrfc1035.rl in gdnsd 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv4 address in zone data...
CVE-2019-13951
The setipv4 function in zscanrfc1035.rl in gdnsd 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv4 address in zone data...
CVE-2019-13951
CVE-2019-13951 affects gdnsd 3.x up to before 3.2.1, where the set_ipv4() function in zscan_rfc1035.rl allows a stack-based buffer overflow when processing zone data containing a long/malformed IPv4 address. Multiple vendor advisories (Red Hat, Ubuntu, Debian, OSV, NVD, CVE List) reference the sa...
PT-2019-13491
Name of the Vulnerable Software and Affected Versions gdnsd versions prior to 2.4.3 gdnsd versions 3.x prior to 3.2.1 Description The issue is related to a stack-based buffer overflow in the set ipv6 function, which can be triggered by a long and malformed IPv6 address in zone data. Recommendatio...
CVE-2019-13951: Out-of-bounds Write
The setipv4 function in zscanrfc1035.rl in gdnsd 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv4 address in zone data...
openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2019-774)
This update for java-180-openjdk to the jdk8u181 icedtea 3.9.0 release fixes the following issues : These security issues were fixed : - CVE-2018-2938: Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...
May 17, 2018—KB4103724 (Preview of Monthly Rollup)
None None...
April 17, 2018—KB4093113 (Preview of Monthly Rollup)
None None...
February 22, 2018—KB4075213 (Preview of Monthly Rollup)
None None...
ISC BIND Zone Data Denial of Service
According to its self-reported version number, the installation of ISC BIND running on the remote name server is affected by a memory exhaustion vulnerability. A server is potentially vulnerable if it accepts zone data from another source, as no limit is currently placed on zone data size. Note...
BIND,Knot,NSD,PowerDNS -- denial over service via oversized zone transfers
ISC reports: DNS protocols were designed with the assumption that a certain amount of trust could be presumed between the operators of primary and secondary servers for a given zone. However, in current practice some organizations have scenarios which require them to accept zone data from sources...
BIND: Denial of service
Background BIND Berkeley Internet Name Domain is a Name Server. Description A vulnerability has been discovered in BIND’s named utility leading to a Denial of Service condition. Impact A remote attacker may be able to cause Denial of Service condition via specially constructed zone data. Workarou...
USN-2728-1 bind9 vulnerability
Hanno Böck discovered that Bind incorrectly handled certain malformed keys when configured to perform DNSSEC validation. A remote attacker could use this issue with specially crafted zone data to cause Bind to crash, resulting in a denial of service...
DEBIAN-CVE-2015-4620
name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit by constructing crafted zone data and then...
Authentication flaw
name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit by constructing crafted zone data and then...