335 matches found
PolarDNS
PolarDNS is a specialized authoritative DNS server written in Python 3.x, originally developed as a tool for security testing of DNS recursive resolvers from the server-side. It allows the operator to produce custom DNS responses, making it suitable for in-depth DNS protocol testing purposes...
WAREED-DNS-C2
Wareed DNS C2 WAREED is a Command and Control C2 that utilizes the DNS protocol for secure communications between the server and the target. Designed to minimize communication and limit data exchange, it is intended to be a first-stage C2 to persist in machines that don't have access to the...
Rocky Linux 9.6 [TuxCare] Security Update: python3-unbound / unbound / unbound-devel / unbound-dracut / etc (ALMALINUX9.6:CLSA-2026:1780912053)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780912053 advisory. - The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service resource consumption by arranging for DNS...
Astra Linux – Vulnerability in unbound
The DNS protocol in RFC 1035 and its updates allows remote attackers to cause a denial of service resource consumption by arranging for DNS queries to be accumulated over seconds. As a result, responses are sent in a pulsing burst, which can be considered traffic amplification in some cases. This...
[SECURITY] Fedora 44 Update: rust-hickory-proto-0.26.2-1.fc44
Hickory-proto is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...
[SECURITY] Fedora 45 Update: rust-hickory-net-0.26.2-1.fc45
Hickory-net is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...
[SECURITY] Fedora 45 Update: rust-hickory-proto-0.26.2-1.fc45
Hickory-proto is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...
CVE-2026-62299 affecting package coredns for versions less than 1.11.4-20
CVE-2026-62299 affecting package coredns for versions less than 1.11.4-20. A patched version of the package is available...
CVE-2026-61920 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-65789 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-62787
CVE-2026-62787 is a remote code execution vulnerability in Windows DNS Server caused by a use-after-free condition. An authenticated attacker could execute code over the network on a targeted host. CVSS v3.1 base score 7.5 (HIGH): AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. The connected sources confirm...
EulerOS 2.0 SP13 : avahi (EulerOS-SA-2026-2321)
According to the versions of the avahi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any...
CVE-2026-5947 SIG(0) validation during query flood may lead to undefined behavior
Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signed with SIG0, it begins work to validate that signature. If, during that validation, the "recursive-clients" limit is reached as would occur during a query...
CVE-2026-4437
Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the...
CVE-2025-64163
DataEase is an open source data visualization analysis tool. In versions 2.10.14 and below, the vendor added a blacklist to filter ldap:// and ldaps://. However, omission of protection for the dns:// protocol results in an SSRF vulnerability. This issue is fixed in version 2.10.15...
CVE-2025-64163
DataEase, an open source data visualization/analysis tool, has a SSRF vulnerability in version 2.10.14 and earlier due to incomplete filtering for the dns:// protocol. The blacklist only filters ldap:// and ldaps://, leaving dns:// unprotected and allowing potential server-side requests to intern...
CVE-2025-64163 DataEase's DB2 is vulnerable to SSRF
DataEase is an open source data visualization analysis tool. In versions 2.10.14 and below, the vendor added a blacklist to filter ldap:// and ldaps://. However, omission of protection for the dns:// protocol results in an SSRF vulnerability. This issue is fixed in version 2.10.15...
