26 matches found
SUSE CVE-2005-0038
The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop...
CVE-2020-25767
An issue was discovered in HCC Embedded NicheStack IPv4 4.1. The dnccopyin routine for parsing DNS domain names does not check whether a domain name compression pointer is pointing within the bounds of the packet e.g., forward compression pointer jumps are allowed, which leads to an Out-of-bounds...
How the NAME:WRECK Bugs Impact Consumers, Businesses
Researchers estimate more than 100 million internet-connected devices are vulnerable to a class of flaws dubbed NAME:WRECK. Devices ranging from smartphones, aircraft navigation systems and industrial internet of things IIoT endpoints are vulnerable to either a denial-of-service DoS or remote...
GLSA-201204-02 : InspIRCd: Arbitrary code execution
The remote host is affected by the vulnerability described in GLSA-201204-02 InspIRCd: Arbitrary code execution A vulnerability in InspIRCd allows DNS compression features to control the number of overflowed bytes sent to the heap-based buffer 'res' in dns.cpp. Impact : A remote attacker could se...
InspIRCd: Arbitrary code execution
Background InspIRCd Inspire IRCd is a modular C++ IRC daemon Description A vulnerability in InspIRCd allows DNS compression features to control the number of overflowed bytes sent to the heap-based buffer "res" in dns.cpp. Impact A remote attacker could send specially crafted DNS responses,...
Microsoft DNS Server Internal Hostname Disclosure Detection
Microsoft DNS server might be prone to an internal hostname disclosure. SPDX-FileCopyrightText: 2009 Tim Brown Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...