39 matches found
[SECURITY] [DLA 2910-1] ldns security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2910-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb February 03, 2022 https://wiki.debian.org/LTS -...
USN-5257-1 ldns vulnerabilities
It was discovered that ldns incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information. CVE-2020-19860, CVE-2020-19861...
USN-5257-1: ldns vulnerabilities
It was discovered that ldns incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information. CVE-2020-19860, CVE-2020-19861...
CVE-2020-19861
When a zone file in ldns 1.7.1 is parsed, the function ldnsnsec3saltdata is too trusted for the length value obtained from the zone file. When the memcpy is copied, the 0xfe - ldnsrdfsizesaltrdf byte data can be copied, causing heap overflow information leakage...
CVE-2020-19861
creationtimestamp| type| source ---|---|--- 2022-01-21 18:13:18+00:00| seen| https://t.me/cibsecurity/36031...
CVE-2020-19861
When a zone file in ldns 1.7.1 is parsed, the function ldnsnsec3saltdata is too trusted for the length value obtained from the zone file. When the memcpy is copied, the 0xfe - ldnsrdfsizesaltrdf byte data can be copied, causing heap overflow information leakage...
CVE-2020-19861
When a zone file in ldns 1.7.1 is parsed, the function ldnsnsec3saltdata is too trusted for the length value obtained from the zone file. When the memcpy is copied, the 0xfe - ldnsrdfsizesaltrdf byte data can be copied, causing heap overflow information leakage...
CVE-2020-19861
When a zone file in ldns 1.7.1 is parsed, the function ldnsnsec3saltdata is too trusted for the length value obtained from the zone file. When the memcpy is copied, the 0xfe - ldnsrdfsizesaltrdf byte data can be copied, causing heap overflow information leakage...
UBUNTU-CVE-2020-19861
When a zone file in ldns 1.7.1 is parsed, the function ldnsnsec3saltdata is too trusted for the length value obtained from the zone file. When the memcpy is copied, the 0xfe - ldnsrdfsizesaltrdf byte data can be copied, causing heap overflow information leakage...
CVE-2020-19861
CVE-2020-19861 (ldns 1.7.1): The parser trusts the length value from a zone file too much in ldns_nsec3_salt_data, allowing 0xfe bytes of salt_rdf to be copied and causing heap overflow information leakage. Relatedly, CVE-2020-19860 describes a heap-out-of-bounds read in ldns_rr_new_frm_str_inter...
CVE-2020-13768
In MiniShare before 1.4.2, there is a stack-based buffer overflow via an HTTP PUT request, which allows an attacker to achieve arbitrary code execution, a similar issue to CVE-2018-19861, CVE-2018-19862, and CVE-2019-17601. NOTE: this product is discontinued...
Stack overflow
In MiniShare before 1.4.2, there is a stack-based buffer overflow via an HTTP PUT request, which allows an attacker to achieve arbitrary code execution, a similar issue to CVE-2018-19861, CVE-2018-19862, and CVE-2019-17601. NOTE: this product is discontinued...
CVE-2019-19861
CVE-2019-19861 is rejected/not used; this entry does not represent an active vulnerability.
Stack overflow
In MiniShare 1.4.1, there is a stack-based buffer overflow via an HTTP CONNECT request, which allows an attacker to achieve arbitrary code execution, a similar issue to CVE-2018-19862 and CVE-2018-19861. NOTE: this product is discontinued...
CVE-2018-19861
Affected software. MiniShare 1.4.1 and earlier. Vulnerability. A stack-based or general buffer overflow in MiniShare’s HTTP handling leads to remote arbitrary code execution. For CVE-2018-19861 the overflow occurs via a long HTTP HEAD request; CVE-2019-17601 via an HTTP CONNECT request; CVE-2020-...
MiniShare 1.4.1 - 'HEAD/POST' Remote Buffer Overflow
Not only the GET method is vulnerable to BOF CVE-2004-2271. HEAD and POST methods are also vulnerable. The difference is minimal, both are exploited in the same way. Only 1 byte difference: GET = 3, HEAD and POST = 4 length ------------------------------------------------------------------- EAX...
MiniShare 1.4.1 HEAD / POST Buffer Overflow Exploit
Hi!!! playing in 2006.... I have adapted the exploit to python Not only the GET method is vulnerable to BOF CVE-2004-2271. HEAD and POST methods are also vulnerable. The difference is minimal, both are exploited in the same way. Only 1 byte difference: GET = 3, HEAD and POST = 4 length...
MiniShare 1.4.1 HEAD / POST Buffer Overflow
Hi!!! playing in 2006.... I have adapted the exploit to python Not only the GET method is vulnerable to BOF CVE-2004-2271. HEAD and POST methods are also vulnerable. The difference is minimal, both are exploited in the same way. Only 1 byte difference: GET = 3, HEAD and POST = 4 length...