Analysis of ISC BIND TKEY Query Response Handling DoS (CVE-2016-9131)
.jpg)
Another TKEY record-related bug in BIND has been fixed with a patch from the Internet Systems Consortium (ISC) that was released just after the New Year. This bug may take down BIND recursive servers by sending a simple query response with TKEY record, thereby causing a denial of service (DoS). This potential DoS vulnerability is caused by an assertion failure in Resolver.c when caching the DNS response with TKEY Record. In this post we will analyze the BIND source codes and expose the root cause of this vulnerability. The TKEY record…
Stick to your New Year’s resolution of understanding all there is about security patches and join us in taking a look at the security updates released by Adobe and Microsoft for the month of January 2017. Microsoft Patches for 2017 After a record setting 2016, the folks in Redmond start 2017 off by releasing only…
In 2016, Trend Micro partnered with ISMG to conduct a survey of financial, healthcare, and government organizations to better understand the challenges they are facing with ransomware. Some of the results surprised us while others were somewhat expected based on what we’ve saw throughout 2016. We all know ransomware has been a major pain for…
I used to love sitting on the floor and watching Saturday morning cartoons. One of my favorite gags was when a character got really, really hungry. In order to emphasize the point, everything and everyone around them turned to food. The newspaper stand owner became a large hand. The baby in a stroller was suddenly…
A lot can happen in a decade. I read an article earlier this week about Apple celebrating the 10th anniversary of its very first iPhone. I started thinking about what was going on in the TippingPoint world 10 years ago and the first thing that came to mind was our Pwn2Own contest. In 2007, the…
I recently posted about why ransomware is such a money maker for criminals. Read it through and I think you’ll understand why this is an area of massive growth for criminals. Ransomware is one of the fastest rising attacks currently out there with no end to that growth in sight. Criminals are making a lot…
Smart cities are redefining the way we live and work. Blending cutting edge IoT technologies with virtualization, big data, cloud and more, they represent an urgent and ongoing attempt to overcome the challenges associated with rapid urbanization. There’s just one problem. These vast, interconnected technology systems also raise serious privacy and security concerns. That’s why…