ISC : Security Vulnerabilities, CVEs, Published In December 2010
ISC DHCP server 4.2 before 4.2.0-P2, when configured to use failover partnerships, allows remote attackers to cause a denial of service (communications-interrupted state and DHCP client service loss) by connecting to a port that is only intended for a failover peer, as demonstrated by a Nagios check_tcp process check to TCP port 520.
Max CVSS
5.0
EPSS Score
11.64%
Published
2010-12-17
Updated
2011-01-19
named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via the standard DNS query mechanism.
Max CVSS
5.0
EPSS Score
2.45%
Published
2010-12-06
Updated
2016-04-04
named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, which might allow remote attackers to cause a denial of service (DNSSEC validation error) by triggering a rollover.
Max CVSS
6.4
EPSS Score
2.33%
Published
2010-12-06
Updated
2018-10-10
named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service (daemon crash) via a query for cached data.
Max CVSS
4.0
EPSS Score
1.38%
Published
2010-12-06
Updated
2018-10-10
4 vulnerabilities found