CVE-2021-31960

CVE-2021-31960 affects the Windows Bind Filter Driver and is an information-disclosure vulnerability that can be exploited locally (attack vector: local) to obtain sensitive data. Reported details show low privileges required (PR:L) with no user interaction, confidentiality impact high. Public ex...

runc: vulnerable to symlink exchange attack

The runc package is vulnerable to a symlink exchange attack whereby an attacker can request a seemingly innocuous container configuration that results in the host filesystem being bind-mounted into the container. The highest threat from this vulnerability is to data confidentiality and integrity ...

Windows Bind Filter Driver Information Disclosure Vulnerability

...

PT-2021-3305 · Microsoft · Windows Bind Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bind Filter Driver affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Bind Filter Driver. It may allow an attacker to obtain unauthorized access to protected...

CVE-2021-31960: Undefined Security Weakness

Windows Bind Filter Driver Information Disclosure Vulnerability...

Windows Bind Filter Driver 信息泄露漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation.Vulnerability is a software application. This program will occasionally publish some of the latest vulnerabilities from the Prism community to the public. A security vulnerability exists in Windows Bind Filter Driver. The...

KLA12202 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. An informati...

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2021-1918)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2021-1939)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ISC BIND TKEY Query Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of ISC BIND. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of TKEY queries. The issue results from the lack of proper validation of...

PT-2021-25042

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.9 Description The issue is related to a potential race condition between the isotp bind and isotp setsockopt functions. This could potentially lead to security vulnerabilities, although the actual impact an...

PT-2021-29104

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.34 through 5.4.123 Description A memory leak issue exists in the smsc75xx bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.34 through...

PT-2021-29160

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.34 through 4.9.270 Description A memory leak issue was discovered in the smsc75xx bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.34...

PT-2021-29128

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.193 Description A memory leak issue exists in the smsc75xx bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.19.193,...

PT-2021-29028

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.34 through 5.12.8 Description A memory leak issue exists in the smsc75xx bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.34 through...

PT-2021-25151

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.235 Description A memory leak issue was discovered in the smsc75xx bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-25134

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.193 Description A memory leak issue was discovered in the smsc75xx bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-29145

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.235 Description A memory leak issue was discovered in the smsc75xx bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-29036

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.9 Description A potential issue exists due to a race between isotp bind and isotp setsockopt. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

SUSE SLED15 / SLES15 Security Update : bind (SUSE-SU-2021:1826-1)

This update for bind fixes the following issues : CVE-2021-25214: Fixed a broken inbound incremental zone update IXFR which could have caused named to terminate unexpectedly bsc1185345. CVE-2021-25215: Fixed an assertion check which could have failed while answering queries for DNAME records that...