K70746705: Multiple NAME:WRECK vulnerabilities

🗓️ 21 Feb 2023 19:58:46Reported by f5Type

f5🔗 my.f5.com👁 58 Views

Multiple NAME:WRECK vulnerabilities in FreeBSD and Nucleus NET, Nucleus RTOS, VSTAR, and SIMOTICS CONNECT products, allowing remote code execution, denial-of-service, and memory leak

Reporter	Title	Published	Views	Family All 85
FreeBSD	FreeBSD -- dhclient heap overflow	2 Sep 202000:00	–	freebsd
GithubExploit	Exploit for Out-of-bounds Write in Freebsd	14 Apr 202120:37	–	githubexploit
BDU FSTEC	The vulnerability of the DNS naming service function of Nucleus NET TCP/IP allows a perpetrator to execute arbitrary code.	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the DNS name resolution function in Nucleus NET TCP/IP allows a attacker to execute arbitrary code.	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the syntax analysis function for domain name records in the Simotics Connect 400 software and hardware suite allows a perpetrator to cause service interruptions.	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the syntax analysis function for domain name records in the Simotics Connect 400 software and hardware suite allows a perpetrator to cause service interruptions.	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the DNS record unpacking function in the Simotics Connect 400 hardware-software complex allows a perpetrator to cause a service failure.	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of DNS clients, related to errors in randomizing transaction identifiers during DNS queries, allows attackers to compromise data integrity.	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of DHCP option 119 on FreeBSD operating systems allows a perpetrator to execute arbitrary code.	21 Apr 202100:00	–	bdu_fstec
Circl	CVE-2020-7461	16 Apr 202111:01	–	circl

21 Feb 2023 19:58Current

7.1High risk

Vulners AI Score7.1

CVSS 27.5

CVSS 3.18.1

EPSS0.07194