191 matches found
Fedora 39 : bind9-next (2024-499b9be35f)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-499b9be35f advisory. Security Fixes - Validating DNS messages containing a lot of DNSSEC signatures could cause excessive CPU load, leading to a denial-of-service...
SUSE: Security Advisory (SUSE-SU-2024:0590-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-6642-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-6642-1: Bind vulnerabilities
Shoham Danino, Anat Bremler-Barr, Yehuda Afek, and Yuval Shavitt discovered that Bind incorrectly handled parsing large DNS messages. A remote attacker could possibly use this issue to cause Bind to consume resources, leading to a denial of service. CVE-2023-4408 Elias Heftrig, Haya Schulmann,...
Fedora 39 : bind / bind-dyndb-ldap (2024-21310568fa)
The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-21310568fa advisory. Security Fixes - Validating DNS messages containing a lot of DNSSEC signatures could cause excessive CPU load, leading to a denial-of-service...
CVE-2023-4408
A flaw was found in the bind package. This issue may allow a remote attacker with no specific privileges to craft a specially long DNS message leading to an excessive and uncontrolled CPU usage, the server being unavailable, and a Denial of Service. Mitigation Mitigation for this issue is either...
[SECURITY] [DSA 5621-1] bind9 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5621-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 14, 2024 https://www.debian.org/security/faq -...
ISC BIND DoS Vulnerability (CVE-2023-4408) - Linux
ISC BIND is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; if...
ISC BIND DoS Vulnerability (CVE-2023-4408) - Windows
ISC BIND is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; if...
CVE-2023-4408
creationtimestamp| type| source ---|---|--- 2024-02-13 15:21:54+00:00| seen| https://t.me/ctinow/183864 2024-03-04 08:41:25+00:00| seen| https://t.me/ctinow/199081 2024-04-13 01:03:48+00:00| seen| https://t.me/arpsyndicate/4617 2024-11-14 12:00:00+00:00| seen|...
CVE-2023-4408 vulnerabilities
Vulnerabilities for packages: bind...
CVE-2023-4408 vulnerabilities
Vulnerabilities for packages: bind...
CVE-2023-4408
The CVE-2023-4408 issue is a vulnerability in the DNS message parsing of BIND's named where the parsing path has an overly high computational complexity. A crafted large or malformed DNS message can cause high CPU usage on affected BIND 9 releases, potentially impacting both authoritative servers...
CVE-2023-4408 Parsing large DNS messages may cause excessive CPU load
The DNS message parsing code in named includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected named instance by exploiting this flaw. This issue affects bot...
CVE-2023-4408 Parsing large DNS messages may cause excessive CPU load
The DNS message parsing code in named includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected named instance by exploiting this flaw. This issue affects bot...
Slackware Linux 15.0 / current bind Multiple Vulnerabilities (SSA:2024-044-01)
The version of bind installed on the remote host is prior to 9.16.48 / 9.18.24. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-044-01 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported...
Malicious code in wlwz-2312-4408 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 470bc350a26ff8e837e63f8266d8d47e723bf0ccbf90a87f87cb58fda276dc53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-574 Malicious code in wlwz-2312-4408 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 470bc350a26ff8e837e63f8266d8d47e723bf0ccbf90a87f87cb58fda276dc53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2021-4408
The CVE-2021-4408 entry concerns the DW Question & Answer plugin for WordPress. A Cross-Site Request Forgery flaw exists in versions up to and including 1.5.8 due to missing or incorrect nonce validation in the update_answer() function, enabling unauthenticated attackers to update answers to ques...