29 matches found
Security update for pdns-recursor (moderate)
This update for pdns-recursor fixes the following issues: Security issues fixed: - CVE-2018-10851: Fixed denial of service via crafted zone record or crafted answer bsc1114157. - CVE-2018-14644: Fixed denial of service via crafted query for meta-types bsc1114170. - CVE-2018-14626: Fixed packet...
FreeBSD : powerdns-recursor -- Multiple vulnerabilities (e9aa0e4c-ea8b-11e8-a5b7-00e04c1ea73d)
powerdns Team reports : CVE-2018-10851: An issue has been found in PowerDNS Recursor allowing a malicious authoritative server to cause a memory leak by sending specially crafted records. The issue is due to the fact that some memory is allocated before the parsing and is not always properly...
[ASA-201811-13] powerdns-recursor: denial of service
Arch Linux Security Advisory ASA-201811-13 ========================================== Severity: Medium Date : 2018-11-12 CVE-ID : CVE-2018-10851 CVE-2018-14626 CVE-2018-14644 Package : powerdns-recursor Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-805 Summary...
CVE-2018-14644
PowerDNS Recursor (4.0.0–4.1.4) is affected by CVE-2018-14644. A remote attacker sending a DNS query for a meta-type such as OPT can cause a zone to be cached as failing DNSSEC validation when the parent zone is signed and all authoritative servers reply with FORMERR, resulting in ServFail respon...
CVE-2018-14644
An issue has been found in PowerDNS Recursor from 4.0.0 up to and including 4.1.4. A remote attacker sending a DNS query for a meta-type like OPT can lead to a zone being wrongly cached as failing DNSSEC validation. It only arises if the parent zone is signed, and all the authoritative servers fo...
CVE-2017-14644
A heap-based buffer overflow was discovered in the AP4HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution...
CVE-2017-14644
The CVE-2017-14644 entry affects Bento4 (version 1.5.0-617) with a heap-based buffer overflow in the AP4_HdlrAtom class. The out-of-bounds write can lead to remote denial of service or potentially code execution. No explicit exploitation details or patched remediation are provided in the connecte...
ncl.ac.uk XSS vulnerability
Vulnerable URL: http://www.ncl.ac.uk/library/special-collections/exhibitions/treasureresults.php?treasuremonth=%21%22%3E%3Cvideo%2Fonloadstart%3Dconfirm%28%60OPENBUGBOUNTY%60%29+%3C%2Fsrc%3E=Search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability...