FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The last vuln.xml file processed by FreshPorts is:

Revision:  321198
Date:      2013-06-18
Time:      15:50:05Z
Committer: delphij

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
57a700f9-12c0-11e2-9f86-001d923933b6	dns/bind9* -- crash on deliberately constructed combination of records ISC reports: A deliberately constructed combination of records could cause named to hang while populating the additional section of a response. Discovery 2012-09-26 Entry 2012-10-10 bind99 lt 9.9.1.4 bind98 lt 9.8.3.4 bind97 lt 9.7.6.4 bind96 lt 9.6.3.1.ESV.R7.4 CVE-2012-5166
2892a8e2-3d68-11e2-8e01-0800273fe665	dns/bind9* -- servers using DNS64 can be crashed by a crafted query ISC reports: BIND 9 nameservers using the DNS64 IPv6 transition mechanism are vulnerable to a software defect that allows a crafted query to crash the server with a REQUIRE assertion failure. Remote exploitation of this defect can be achieved without extensive effort, resulting in a denial-of-service (DoS) vector against affected servers. Discovery 2012-11-27 Entry 2012-12-04 bind99 lt 9.9.2.1 bind99-base lt 9.9.2.1 bind98 lt 9.8.4.1 bind98-base lt 9.8.4.1 CVE-2012-5688
57a700f9-12c0-11e2-9f86-001d923933b6	dns/bind9* -- crash on deliberately constructed combination of records ISC reports: A deliberately constructed combination of records could cause named to hang while populating the additional section of a response. Discovery 2012-09-26 Entry 2012-10-10 bind99 lt 9.9.1.4 bind98 lt 9.8.3.4 bind97 lt 9.7.6.4 bind96 lt 9.6.3.1.ESV.R7.4 CVE-2012-5166

VuXML ID

Description

57a700f9-12c0-11e2-9f86-001d923933b6

dns/bind9* -- crash on deliberately constructed combination of records

ISC reports:

A deliberately constructed combination of records could cause named to hang while populating the additional section of a response.

Discovery 2012-09-26
Entry 2012-10-10
bind99

lt 9.9.1.4

bind98

lt 9.8.3.4

bind97

lt 9.7.6.4

bind96

lt 9.6.3.1.ESV.R7.4

CVE-2012-5166

2892a8e2-3d68-11e2-8e01-0800273fe665

dns/bind9* -- servers using DNS64 can be crashed by a crafted query

ISC reports:

BIND 9 nameservers using the DNS64 IPv6 transition mechanism are vulnerable to a software defect that allows a crafted query to crash the server with a REQUIRE assertion failure. Remote exploitation of this defect can be achieved without extensive effort, resulting in a denial-of-service (DoS) vector against affected servers.

Discovery 2012-11-27
Entry 2012-12-04
bind99