named in ISC BIND 9.x prior to 9.9.9-P5, 9.10.x prior to 9.10.4-P5, and 9.11.x prior to 9.11.0-P2 allows remote malicious users to cause a denial of service (assertion failure and daemon exit) via a crafted DS resource record in an answer.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
isc bind 9.11.0 |
||
isc bind 9.10.4 |
||
isc bind 9.0.0 |
||
isc bind 9.1.1 |
||
isc bind 9.1.3 |
||
isc bind 9.10.0 |
||
isc bind 9.10.1 |
||
isc bind 9.10.2 |
||
isc bind 9.10.3 |
||
isc bind 9.2.0 |
||
isc bind 9.2.2 |
||
isc bind 9.2.4 |
||
isc bind 9.2.5 |
||
isc bind 9.2.8 |
||
isc bind 9.2.9 |
||
isc bind 9.3.0 |
||
isc bind 9.3.2 |
||
isc bind 9.3.3 |
||
isc bind 9.3.5 |
||
isc bind 9.3.6 |
||
isc bind 9.4 |
||
isc bind 9.4.0 |
||
isc bind 9.0.1 |
||
isc bind 9.1 |
||
isc bind 9.2 |
||
isc bind 9.2.1 |
||
isc bind 9.2.3 |
||
isc bind 9.2.7 |
||
isc bind 9.3.1 |
||
isc bind 9.3.4 |
||
isc bind 9.4.2 |
||
isc bind 9.4.3 |
||
isc bind 9.5.0 |
||
isc bind 9.5.1 |
||
isc bind 9.5.2 |
||
isc bind 9.6 |
||
isc bind 9.6.0 |
||
isc bind 9.6.1 |
||
isc bind 9.6.2 |
||
isc bind 9.6.3 |
||
isc bind 9.7.0 |
||
isc bind 9.7.1 |
||
isc bind 9.7.2 |
||
isc bind 9.7.3 |
||
isc bind 9.7.4 |
||
isc bind 9.7.5 |
||
isc bind 9.7.6 |
||
isc bind 9.9.8 |
||
isc bind 9.9.9 |
||
isc bind 9.8.0 |
||
isc bind 9.0 |
||
isc bind 9.2.6 |
||
isc bind 9.3 |
||
isc bind 9.4.1 |
||
isc bind 9.5 |
||
isc bind 9.7.7 |
||
isc bind 9.8.1 |
||
isc bind 9.1.0 |
||
isc bind 9.1.2 |
||
isc bind 9.5.3 |
Nine advisories landed today
Clear the diaries, Juniper sysadmins, a van-load of patches landed today. I suggest you join me in getting a coffee and settling in while we go through the list. The security fixes cover six fixes to Junos, one for the company’s EX Series switches, BIND fixes for SRX, vSRX and J-Series units, and multiple fixes for the NorthStar controller. Ready? Let’s go. BIND: Junos OS on SRX, vSRX and J-Series has been upgraded to tick the boxes on five vulnerabilities. All four CVEs (CVE-2016-2776, CVE-...
DNS servers are crashable until they're patched
BIND administrators, get patching: there are three irritating flaws you need to splat. The denial-of-service vulnerabilities in question are CVE-2016-9131, CVE-2016-9147, and CVE-2016-9444. Common to all three is that they're exploitable denial-of-service bugs that predominantly affect BIND-based DNS servers running in recursive mode (that is, if the DNS server doesn't have an answer locally, it passes the query upstream). In CVE-2016-9131, if a BIND recursive server can be crashed by a malforme...
Vulmon