Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 280

Export CSV
CVE-2012-3817

bind: heavy DNSSEC validation load can cause assertion failure

ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does not properly initialize the failing-query cache, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) by sending many queries.

CVSS 2.0 · 7.8 High EPSS 23.7% KEV · Not listed
Vendors
Isc Redhat
Products
Bind Enterprise Linux
CVE-2012-3571

dhcp: DoS due to error in handling malformed client identifiers

ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed client identifier.

CVSS 2.0 · 6.1 Medium EPSS 13.0% KEV · Not listed
Vendors
Canonical Debian Isc and 1 more
Products
Ubuntu Linux Debian Linux Dhcp and 1 more
CVE-2012-3570

dhcp: DoS in DHCPv6 due to error in handling malformed client identifiers

Buffer overflow in ISC DHCP 4.2.x before 4.2.4-P1, when DHCPv6 mode is enabled, allows remote attackers to cause a denial of service (segmentation fault and daemon exit) via a crafted client identifier parameter.

CVSS 2.0 · 5.7 Medium EPSS 2.6% KEV · Not listed
Vendors
Isc
Products
Dhcp
CVE-2012-3523

(nnrpd): Prone to STARTTLS plaintext command injection

The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.

CVSS 2.0 · 6.8 Medium EPSS 3.2% KEV · Not listed
Vendors
Isc
Products
Inn
CVE-2012-1667

bind: handling of zero length rdata can cause named to terminate unexpectedly

ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.

CVSS 2.0 · 8.5 High EPSS 13.3% KEV · Not listed
Vendors
Isc Redhat
Products
Bind Enterprise Linux Rhel Els
CVE-2012-1033

bind: deleted domain name resolving flaw

The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.

CVSS 2.0 · 5.0 Medium EPSS 13.1% KEV · Not listed
Vendors
Isc Redhat
Products
Bind Enterprise Linux
CVE-2011-4868

dhcp: error in DDNS processing of DHCPv6 leases can cause ISC dhcpd crash

The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets related to a lease-status update.

CVSS 2.0 · 6.1 Medium EPSS 3.4% KEV · Not listed
Vendors
Isc
Products
Dhcp
CVE-2011-4539

dhcp: DoS due to processing certain regular expressions

dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service (daemon crash) via a crafted request packet.

CVSS 2.0 · 5.0 Medium EPSS 15.2% KEV · Not listed
Vendors
Canonical Debian Isc and 1 more
Products
Ubuntu Linux Debian Linux Dhcp and 1 more
CVE-2011-4313

bind: Remote denial of service against recursive servers via logging negative cache entry

query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.

CVSS 2.0 · 5.0 Medium EPSS 16.2% KEV · Not listed
Vendors
Isc Redhat
Products
Bind Enterprise Linux
CVE-2011-2749

dhcp: denial of service flaws

The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted BOOTP packet.

CVSS 2.0 · 7.8 High EPSS 38.8% KEV · Not listed
Vendors
Canonical Debian Isc and 1 more
Products
Ubuntu Linux Debian Linux Dhcp and 1 more
CVE-2011-2748

dhcp: denial of service flaws

The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted DHCP packet.

CVSS 2.0 · 7.8 High EPSS 38.8% KEV · Not listed
Vendors
Canonical Debian Isc and 1 more
Products
Ubuntu Linux Debian Linux Dhcp and 1 more
CVE-2011-2465

bind: Remote Crash with Certain RPZ Configurations

Unspecified vulnerability in ISC BIND 9 9.8.0, 9.8.0-P1, 9.8.0-P2, and 9.8.1b1, when recursion is enabled and the Response Policy Zone (RPZ) contains DNAME or certain CNAME records, allows remote attackers to cause a denial of service (named daemon crash) via an unspecified query.

CVSS 2.0 · 2.6 Low EPSS 8.9% KEV · Not listed
Vendors
Isc
Products
Bind
CVE-2011-2464

bind: Specially constructed packet will cause named to exit

Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named daemon crash) via a crafted UPDATE request.

CVSS 2.0 · 5.0 Medium EPSS 19.3% KEV · Not listed
Vendors
Isc Redhat
Products
Bind Enterprise Linux
CVE-2011-1910

bind: Large RRSIG RRsets and Negative Caching can crash named

Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets.

CVSS 2.0 · 5.0 Medium EPSS 24.6% KEV · Not listed
Vendors
Isc Redhat
Products
Bind Enterprise Linux
CVE-2011-1907

bind: RRSIG queries can trigger server crash when using Response Policy Zones (RPZ)

ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RRSIG query.

CVSS 2.0 · 5.0 Medium EPSS 5.4% KEV · Not listed
Vendors
Isc
Products
Bind
CVE-2011-0997

dhclient: insufficient sanitization of certain DHCP response values

dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is provided to dhclient-script.

CVSS 2.0 · 7.5 High EPSS 84.6% KEV · Not listed
Vendors
Canonical Debian Isc and 1 more
Products
Ubuntu Linux Debian Linux Dhcp and 2 more
CVE-2011-0414

bind: named lockup with IXFR or DDNS update and a high query rate

ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cause a denial of service (deadlock and daemon hang) by sending a query at the time of (1) an IXFR transfer or (2) a DDNS update.

CVSS 2.0 · 7.1 High EPSS 13.7% KEV · Not listed
Vendors
Isc
Products
Bind
CVE-2011-0413

dhcp: unexpected abort caused by a DHCPv6 decline message

The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) by sending a message over IPv6 for a declined and abandoned address.

CVSS 2.0 · 7.8 High EPSS 32.6% KEV · Not listed
Vendors
Isc Redhat
Products
Dhcp Enterprise Linux
CVE-2010-3762

Bind: DoS (assertion failure) via a DNS query with bad signatures

ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote attackers to cause a denial of service (daemon crash) via a DNS query.

CVSS 2.0 · 4.3 Medium EPSS 8.1% KEV · Not listed
Vendors
Isc Redhat
Products
Bind Enterprise Linux
CVE-2010-3616

dhcp: server hangs with TCP to failover peer port

ISC DHCP server 4.2 before 4.2.0-P2, when configured to use failover partnerships, allows remote attackers to cause a denial of service (communications-interrupted state and DHCP client service loss) by connecting to a port that is only intended for a failover peer, as demonstrated by a Nagios check_tcp process check to TCP port 520.

CVSS 2.0 · 5.0 Medium EPSS 7.9% KEV · Not listed
Vendors
Isc
Products
Dhcp