isc bind 9.11.0 vulnerabilities and exploits

(subscribe to this query)

An error in handling certain queries can cause an assertion failure when a server is using the nxdomain-redirect feature to cover a zone for which it is also providing authoritative service. A vulnerable server could be intentionally stopped by an attacker if it was using a confi...

Isc Bind 9.9.8 Isc Bind 9.9.9 Isc Bind 9.11.0 Netapp Data Ontap Edge -Netapp Solidfire Element Os Management Node -

named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some...

Isc Bind 9.9.9 Isc Bind 9.9.10 Isc Bind 9.10.4 Isc Bind 9.10.5 Isc Bind 9.11.0 Isc Bind 9.11.1 Netapp Data Ontap Edge -Netapp Element Software -Netapp Oncommand Balance -Debian Debian Linux 8.0

The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege escalation if the host file system permissions allow this. Affects BIND 9.2.6-P2->9.2.9, 9.3.2-P1->9.3.6, 9.4.0->9.8.8, 9.9.0->9.9.10, 9.10.0->9.10.5, 9.1...

Isc Bind Isc Bind 9.2.6 Isc Bind 9.3.2

1 EDB exploit

"managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses managed-keys...

Isc Bind Isc Bind 9.9.3 Isc Bind 9.10.7 Isc Bind 9.10.8 Isc Bind 9.11.5 Isc Bind 9.12.3

Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P2, 9.12.0 -> 9.12.3-P2, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported Preview ...

Isc Bind Isc Bind 9.9.3 Isc Bind 9.10.8 Isc Bind 9.11.5 Isc Bind 9.12.3 Redhat Enterprise Linux 8.0

If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5, 9.11.0->9.11.1, 9.9.10-S1, 9.10.5-S1.

Isc Bind Isc Bind 9.9.10 Isc Bind 9.10.5 Netapp Data Ontap Edge -Netapp Element Software -Netapp Oncommand Balance -

With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query received via UDP or via TCP without pipelining enabled. A client using a TCP-pipelined connection to a server could consume more resources than the server has been pr...

Isc Bind Isc Bind 9.11.5 Isc Bind 9.11.6 Isc Bind 9.11.12 Isc Bind 9.12.4 Fedoraproject Fedora 30 Fedoraproject Fedora 31

By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which was intended to limit...

F5 Big-ip Local Traffic Manager F5 Big-ip Local Traffic Manager 15.0.0 F5 Big-ip Application Acceleration Manager F5 Big-ip Application Acceleration Manager 15.0.0 F5 Big-ip Advanced Firewall Manager F5 Big-ip Advanced Firewall Manager 15.0.0 F5 Big-ip Analytics F5 Big-ip Analytics 15.0.0 F5 Big-ip Access Policy Manager F5 Big-ip Access Policy Manager 15.0.0 F5 Big-ip Application Security Manager F5 Big-ip Application Security Manager 15.0.0

Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers. The size limit for that cache database can be configured using the `max-cache-size` statement in the con...

Isc Bind Debian Debian Linux 10.0 Debian Debian Linux 11.0 Debian Debian Linux 12.0 Fedoraproject Fedora 37 Fedoraproject Fedora 38 Netapp Active Iq Unified Manager -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Netapp H410c Firmware -Netapp H300s Firmware -

A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development...

F5 Big-ip Local Traffic Manager F5 Big-ip Local Traffic Manager 14.0.0 F5 Big-ip Local Traffic Manager 14.1.0 F5 Big-ip Local Traffic Manager 15.0.0 F5 Big-ip Application Acceleration Manager F5 Big-ip Application Acceleration Manager 14.0.0 F5 Big-ip Application Acceleration Manager 14.1.0 F5 Big-ip Application Acceleration Manager 15.0.0 F5 Big-ip Advanced Firewall Manager F5 Big-ip Advanced Firewall Manager 14.0.0 F5 Big-ip Advanced Firewall Manager 14.1.0 F5 Big-ip Advanced Firewall Manager 15.0.0

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook