OPENSUSE-SU-2020:2045-1 Security update for c-ares

This update for c-ares fixes the following issues: - Version update to 1.17.0 CVE-2020-8277: Fixed a Denial of Service through DNS request bsc1178882 For further details see https://c-ares.haxx.se/changelog.html This update was imported from the SUSE:SLE-15:Update update project...

Security fix for the ALT Linux 9 package node version 14.15.1-alt1

14.15.1-alt1 built Nov. 26, 2020 Vitaly Lipatov in task 261957 Nov. 16, 2020 Vitaly Lipatov - new version 14.15.1 with rpmrb script - set c-ares = 1.16.1-alt2 - CVE-2020-8277: Denial of Service through DNS request High...

Security update for c-ares (moderate)

openSUSE Security Update: Security update for c-ares Announcement ID: openSUSE-SU-2020:2045-1 Rating: moderate References: 1178882 Cross-References: CVE-2020-8277 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for c-ares fix...

CVE-2020-8277

creationtimestamp| type| source ---|---|--- 2020-11-19 07:41:06+00:00| seen| https://t.me/cibsecurity/16574...

CVE-2020-8277

A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions 15.2.1, 14.15.1, and 12.19.1 by getting the application to resolve a DNS record with a larger number of responses. This is fixed in 15.2.1, 14.15.1, and...

AZL-32281 CVE-2020-8277 affecting package python-gevent for versions less than 21.1.2-3

A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions 15.2.1, 14.15.1, and 12.19.1 by getting the application to resolve a DNS record with a larger number of responses. This is fixed in 15.2.1, 14.15.1, and...

CVE-2020-8277

CVE-2020-8277 centers on a DoS due to DNS resolution behavior in Node.js (triggering requests that cause many DNS responses). Public details in the initial CVE describe the impact and fixed versions: Node.js releases 15.2.1, 14.15.1, and 12.19.1 address the issue. Connected documents show affecte...

CVE-2020-8277

A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions 15.2.1, 14.15.1, and 12.19.1 by getting the application to resolve a DNS record with a larger number of responses. This is fixed in 15.2.1, 14.15.1, and...

Security fix for the ALT Linux 10 package node version 14.15.1-alt1

Nov. 16, 2020 Vitaly Lipatov 14.15.1-alt1 - new version 14.15.1 with rpmrb script - set c-ares = 1.16.1-alt2 - CVE-2020-8277: Denial of Service through DNS request High...

November 2020 Security Releases

November 2020 Security Releases Update 16-Nov-2020 Security releases available Updates are now available for v12.x, v14.x and v15.x Node.js release lines for the following issues. Denial of Service through DNS request CVE-2020-8277 A Node.js application that allows an attacker to trigger a DNS...

Node.js -- November 2020 Security Releases

Node.js reports: Updates are now available for v12.x, v14.x and v15.x Node.js release lines for the following issues. Denial of Service through DNS request CVE-2020-8277 A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of...

CVE-2019-8277

UltraVNC revision 1211 contains multiple memory-leak vulnerabilities (CWE-665) in the VNC server code that can allow an attacker to read stack memory and, with other vulnerabilities, bypass ASLR. The issues are exploitable via network connectivity and have been fixed in revision 1212. This CVE en...

CVE-2019-8277

UltraVNC revision 1211 contains multiple memory leaks CWE-665 in VNC server code, which allows an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be...

AVEVA Wonderware License Server

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/Low skill level to exploit Vendor: AVEVA Software, LLC AVEVA Equipment: Wonderware License Server Vulnerability: Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of...

Flexera FlexNet Publisher Buffer Overflow - Ver2 (CVE-2015-8277)

A buffer overflow vulnerability exists in FlexNet Publisher License Server. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system or cause application crashes...

CVE-2017-8277

In CVE-2017-8277, Qualcomm products running Android CAF builds on the Linux kernel are affected. The issue occurs in the function msm_dba_register_client: if a client’s registration fails, the object is freed but not removed from the list, enabling a use-after-free when the list is traversed next...

CVE-2014-8277

...

CVE-2014-8277

CVE-2014-8277 entry is rejected/not used and does not represent an active vulnerability.

CVE-2016-8277

CVE-2016-8277 affects Huawei USG9520, USG9560 and USG9580 devices running software prior to V300R001C01SPCa00. A remote authenticated attacker can trigger a denial-of-service (device restart) by sending a malicious parameter in an unspecified command. Multiple sources corroborate that Huawei rele...

Security Advisory - DoS Vulnerability in Multiple Huawei Products

There is a DoS vulnerability in some Huawei products. Since the device does not validate the parameters in a certain command, an attacker with certain permissions could log in and deliver the command containing a malicious parameter to make the device restart. Vulnerability ID: HWPSIRT-2016-06064...