bind security update

CentOS Errata and Security Advisory CESA-2014:0043 Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score...

bind: named crash when handling malformed NSEC3-signed zones

A denial of service flaw was found in the way BIND handled queries for NSEC3-signed zones. A remote attacker could use this flaw against an authoritative name server that served NCES3-signed zones by sending a specially crafted query, which, when processed, would cause named to crash...

Ubuntu Update for bind9 USN-2081-1

Check for the Version of bind9 OpenVAS Vulnerability Test $Id: gbubuntuUSN20811.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for bind9 USN-2081-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

MGASA-2014-0013 Updated bind package fixes security vulnerability

Updated bind packages fix security vulnerability: Because of a defect in handling queries for NSEC3-signed zones, BIND can crash with an "INSIST" failure in name.c when processing queries possessing certain properties. By exploiting this defect an attacker deliberately constructing a query with t...

[USN-2081-1] Bind vulnerability

========================================================================== Ubuntu Security Notice USN-2081-1 January 13, 2014 bind9 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

FreeBSD : bind -- denial of service vulnerability (cb252f01-7c43-11e3-b0a6-005056a37f68)

ISC reports : Because of a defect in handling queries for NSEC3-signed zones, BIND can crash with an 'INSIST' failure in name.c when processing queries possessing certain properties. By exploiting this defect an attacker deliberately constructing a query with the right properties could achieve...

FreeBSD-SA-14:04.bind

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-14:04.bind Security Advisory The FreeBSD Project Topic: BIND remote denial of service vulnerability Category: contrib Module: bind Announced: 2014-01-14 Credits...

bind -- denial of service vulnerability

ISC reports: Because of a defect in handling queries for NSEC3-signed zones, BIND can crash with an "INSIST" failure in name.c when processing queries possessing certain properties. By exploiting this defect an attacker deliberately constructing a query with the right properties could achieve...

Scientific Linux Security Update : tzdata enhancement update on SL5.x, SL6.x i386/x86_64 (20130308)

This update adds the following enhancements : The Chilean Government is extending the period of Daylight Saving Time DST in the year 2013 until April the 27th. Then, Chile Standard Time CLT and Easter Island Standard Time EAST will be in effect until September the 7th when switching again to DST...

bind security update

CentOS Errata and Security Advisory CESA-2013:0550 Updated bind packages that fix one security issue and add one enhancement are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scorin...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Authoritative DNS - DNS Zones page in Barracuda Link Balancer 330 Firmware 1.3.2.005 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 zoneid or 2 scope parameter...

CVE-2011-5114

Multiple cross-site scripting XSS vulnerabilities in the Authoritative DNS - DNS Zones page in Barracuda Link Balancer 330 Firmware 1.3.2.005 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 zoneid or 2 scope parameter...

CVE-2011-5114

The CVE-2011-5114 entry describes multiple cross-site scripting (XSS) vulnerabilities in the Barracuda Link Balancer 330, firmware 1.3.2.005 and earlier, specifically on the Authoritative DNS – DNS Zones page. The flaw allows remote attackers to inject arbitrary web script or HTML via the zoneid ...

CVE-2011-5114

Multiple cross-site scripting XSS vulnerabilities in the Authoritative DNS - DNS Zones page in Barracuda Link Balancer 330 Firmware 1.3.2.005 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 zoneid or 2 scope parameter...

Scientific Linux Security Update : tzdata on SL3.x, SL4.x, SL5.x i386/x86_64

The tzdata package contains data files with rules for various time zones around the world. This updated tzdata package addresses the following changes to Daylight Savings Time DST observations : - Cuba is starting DST on March 16 as of 2008 it started DST on March 8 in 2007. - Syria is starting D...

Scientific Linux Security Update : tzdata on SL3.x, SL4.x, SL5.x i386/x86_64

The tzdata package contains data files with rules for various time zones around the world. This updated package addresses the following changes to Daylight Saving Time DST observations : - Future transition dates for Brazil were fixed. - Several Argentinian provinces decided not to observe Daylig...

Scientific Linux Security Update : tzdata on SL5.x, SL4.x, SL3.x i386/x86_64

An updated tzdata package that is updated for Argentina is now available. The tzdata package contains data files with rules for various time zones around the world. Argentina changed to Daylight Saving Time DST on December 30, 2007. This updated package includes updated rules to reflect this...

Unbound < 1.4.14 / 1.4.13p2 Multiple DoS

According to its self-reported version number, the remote Unbound DNS resolver is affected by multiple denial of service vulnerabilities : - A denial of service vulnerability exists due to an attempt to free unallocated memory during the processing of duplicate CNAME records in a signed zone. An...

Design/Logic Flaw

validator/valnsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service daemon crash via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528...

Combination of Eyes and Algorithms Wins $50K Prize In DARPA's Shredder Challenge

Scientists for the Pentagon’s far-out research branch, DARPA, weren’t sure that anyone would be able to collect the $50,000 prize when they announced their Shredder Challenge to find ways to reassemble shredded documents just over a month ago. This week – just 33 days later – they had a winner...