Unbound < 1.4.14 / 1.4.13p2 Multiple DoS

According to its self-reported version number, the remote Unbound DNS resolver is affected by multiple denial of service vulnerabilities : - A denial of service vulnerability exists due to an attempt to free unallocated memory during the processing of duplicate CNAME records in a signed zone. An...

Debian DSA-2370-1 : unbound - several vulnerabilities

It was discovered that Unbound, a recursive DNS resolver, would crash when processing certain malformed DNS responses from authoritative DNS servers, leading to denial of service. - CVE-2011-4528 Unbound attempts to free unallocated memory during processing of duplicate CNAME records in a signed...

Fedora Update for unbound FEDORA-2011-17337

Check for the Version of unbound OpenVAS Vulnerability Test Fedora Update for unbound FEDORA-2011-17337 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] [DSA 2370-1] unbound security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2370-1 [email protected] http://www.debian.org/security/ Florian Weimer December 22, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2370-1] unbound security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2370-1 [email protected] http://www.debian.org/security/ Florian Weimer December 22, 2011 http://www.debian.org/security/faq -...

DSA-2370-1 unbound - several

Bulletin has no description...

CVE-2011-4869

validator/valnsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service daemon crash via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528...

CVE-2011-4869

CVE-2011-4528 and CVE-2011-4869 in Unbound describe remote-denial-of-service via crafted responses or memory handling issues in the 1.4.x series. CVE-2011-4528: during processing of duplicate CNAMEs in a signed zone, Unbound may free unallocated memory, potentially crashing the daemon. CVE-2011-4...

CVE-2010-4869

CVE-2010-4869 targets DBHcms 1.1.4, where a SQL injection flaw in index.php allows remote attackers to inject arbitrary SQL via the editmenu parameter. The CVSS2 base score is 7.5 (HIGH) with network attack vector, no authentication, and partial impact on confidentiality, integrity, and availabil...

CVE-2010-4869

creationtimestamp| type| source ---|---|--- 2010-10-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15309...

CVE-2009-4869

creationtimestamp| type| source ---|---|--- 2010-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34483...

CVE-2009-4869

CVE-2009-4869 is an XSS vulnerability in Nasim Guest Book 1.2, specifically in index.php where the page parameter can be exploited to inject arbitrary web script or HTML. The connected Red Hat and NVD entries confirm the same issue but do not provide details on a fix or patch within the supplied ...

Gentoo Security Advisory GLSA 200903-33 (ffmpeg gst-plugins-ffmpeg mplayer)

The remote host is missing updates announced in advisory GLSA 200903-33. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 200903-33 (ffmpeg gst-plugins-ffmpeg mplayer)

The remote host is missing updates announced in advisory GLSA 200903-33. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-4869

Summary: CVE-2008-4869 affects FFmpeg 0.4.9 as used by MPlayer. The vulnerability is a context-dependent memory leak that can be exploited to cause a denial of service via memory consumption. The connected advisories confirm FFmpeg-related issues in 2008/2009 timelines, with multiple sources (Man...

CVE-2006-4869

PHP remote file inclusion vulnerability in phpunity-postcard.php in phpunity.postcard allows remote attackers to execute arbitrary PHP code via a URL in the gallerypath parameter...

MS:15028518-1BD5-4869-8895-E92D0BFE3E55

...

MS:3F811508-4B0F-4869-BEE9-3C8592CF0C6B

...