2308 matches found
EUVD-2026-119455
The DNS wire-format message parser in hickory-proto Hickory DNS 0.18 before 0.26.2 preallocates record vectors sized by the untrusted ANCOUNT, NSCOUNT, and ARCOUNT header fields before reading record data. Remote attackers can send a UDP datagram, or a spoofed response to a client/resolver, with...
CVE-2026-123584
The hickory-net crate in Hickory DNS 0.26.0 before 0.26.2 stops listening and returns an error when a client UDP connection receives a datagram that cannot be parsed as a DNS message. Remote attackers who guess the query's source port, without knowing the transaction ID, can spoof malformed...
CVE-2026-123570
The hickory-proto (Hickory DNS) library versions 0.18 through 0.26.2 is vulnerable to a Memory Amplification Denial of Service (DoS) . The vulnerability exists in the DNS wire-format message parser, which preallocates record vectors based on untrusted ANCOUNT , NSCOUNT , and ARCOUNT header fields...
CVE-2026-123584: hickory-dns: The hickory-net crate in Hickory DNS 0.26.0 before 0.26.2 stops listening and returns an error when a client UDP…
The hickory-net crate in Hickory DNS 0.26.0 before 0.26.2 stops listening and returns an error when a client UDP connection receives a datagram that cannot be parsed as a DNS message. Remote attackers who guess the query's source port, without knowing the transaction ID, can spoof malformed...
PT-2026-139851
The DNS wire-format message parser in hickory-proto Hickory DNS 0.18 before 0.26.2 preallocates record vectors sized by the untrusted ANCOUNT, NSCOUNT, and ARCOUNT header fields before reading record data. Remote attackers can send a UDP datagram, or a spoofed response to a client/resolver, with...
CVE-2026-123570: hickory-dns: The DNS wire-format message parser in hickory-proto (Hickory DNS) 0.18 before 0.26.2 preallocates record vectors sized…
The DNS wire-format message parser in hickory-proto Hickory DNS 0.18 before 0.26.2 preallocates record vectors sized by the untrusted ANCOUNT, NSCOUNT, and ARCOUNT header fields before reading record data. Remote attackers can send a UDP datagram, or a spoofed response to a client/resolver, with...
modcluster-core: mod_cluster Advertise Listener: unauthenticated DoS via crafted multicast datagram
A flaw was found in modcluster's AdvertiseListenerImpl org.jboss.modcluster core module. A single crafted UDP multicast datagram with a valid HTTP status line and a "Server:" header but without the "Date:", "Digest:", and "Sequence:" headers triggers a NullPointerException in verifyDigest that is...
modcluster-core: mod_cluster Advertise Listener: unauthenticated DoS via crafted multicast datagram
A flaw was found in modcluster's AdvertiseListenerImpl org.jboss.modcluster core module. A single crafted UDP multicast datagram with a valid HTTP status line and a "Server:" header but without the "Date:", "Digest:", and "Sequence:" headers triggers a NullPointerException in verifyDigest that is...
CVE-2026-119737
The pppoewrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X Amlogic S905/S905X TV boxes, contains a command injection vulnerability that allows local attackers to execute arbitrary commands as root by sending crafted messages to a world-writable AFUNIX datagram socket a...
EUVD-2026-115546
The pppoewrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X Amlogic S905/S905X TV boxes, contains a command injection vulnerability that allows local attackers to execute arbitrary commands as root by sending crafted messages to a world-writable AFUNIX datagram socket a...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: firewire: net: Fix fragmented datagram reassembly fwnetfragnew maintains a sorted list of received fragments for a partial datagram. When a new fragment is adjacent to an existing fragment, the code checks whether the new fragmen...
CVE-2026-119737: Nexbox, Amlogic: The pppoe_wrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X (Amlogic S905/S905X) TV boxes,…
The pppoewrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X Amlogic S905/S905X TV boxes, contains a command injection vulnerability that allows local attackers to execute arbitrary commands as root by sending crafted messages to a world-writable AFUNIX datagram socket a...
PT-2026-135664
The pppoe wrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X Amlogic S905/S905X TV boxes, contains a command injection vulnerability that allows local attackers to execute arbitrary commands as root by sending crafted messages to a world-writable AF UNIX datagram socket...
SspiUacBypass
SspiUacBypass Bypassing UAC with SSPI Datagram Contexts Full technical details at -- https://splintercod3.blogspot.com/p/bypassing-uac-with-sspi-datagram.html Demo...
FakeNetBIOS
Note to author: if you would like this pulled from Github, I understand and will do so without question. Since you have provided source I @mubix figured it would be a good way to get improvments into the package | | | FakeNetBIOS Tools | | | | Simulation of NetBIOS hosts Windows-like | | |...
CVE-2026-46560 OpenAM Authentication Bypass via RADIUS Spoofing
Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the RADIUS authentication module opens an unconnected datagram socket and trusts the first UDP datagram received on the client source port. The receive path does not verify the source IP and port, match the response...
CVE-2026-46560
In OpenAM Community Edition (through version 16.0.6 ), an Improper Verification of Cryptographic Signature (CWE-347) in the RADIUS authentication module allows unauthenticated network attackers to bypass authentication. The module opens an unconnected datagram socket and accepts the first UDP dat...
Open Identity Platform OpenAM encryption issue vulnerability
Versions of OpenAM prior to 16.1.1 contain an encryption-related vulnerability. This vulnerability arises because the RADIUS authentication module trusts the first UDP datagram received from a client source port; it fails to validate the source IP and port, the response identifier, or the RFC 286...
RUSTSEC-2026-0420 wasip3 UDP `send` can deliver a datagram to an address only allowed for receiving
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hmmr-87qq-258j For more information see the GitHub-hosted security advisory...
wasip3 UDP `send` can deliver a datagram to an address only allowed for receiving
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hmmr-87qq-258j For more information see the GitHub-hosted security advisory...