Amazon Linux 2023 : ruby4.0, ruby4.0-bundled-gems, ruby4.0-default-gems (ALAS2023-2026-2144)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2144 advisory. An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.getclass, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create generate a new...

CVE-2026-64194

The Net::DNS Perl library (versions through 1.55 ) is vulnerable to a Denial of Service (DoS) attack due to deep DNS compression pointer chains. The root cause is that Net::DNS::DomainName::decode follows RFC 1035 compression pointers without a depth limit, allowing arbitrarily long backward chai...

CVE-2026-47180 Zeroconf: Unbounded recursion in DNS compression-pointer decoder allows LAN-local denial of service

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.5, DNSIncoming.decodelabelsatoffset recurses once per DNS-name compression pointer, and a single mDNS packet carrying chained pointers can trigger a RecursionError that escapes DNSIncoming.init, causing...

UBUNTU-CVE-2026-1425

A security flaw has been discovered in pymumu SmartDNS up to 47.1. This vulnerability affects the function dnsdecoderrhead/dnsdecodeSVCBHTTPS of the file src/dns.c of the component SVBC Record Parser. The manipulation results in stack-based buffer overflow. It is possible to launch the attack...

CVE-2026-1425

The CVE-2026-1425 entry describes a stack-based buffer overflow in pymumu SmartDNS (up to 47.1) affecting SVBC Record Parser’s src/dns.c, specifically _dns_decode_rr_head/_dns_decode_SVCB_HTTPS. The vulnerability allows remote exploitation and is analyzed with high attack complexity. Root cause i...

Ubuntu Update for exim4 USN-1618-1

Ubuntu Update for Linux kernel vulnerabilities USN-1618-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16181.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for exim4 USN-1618-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1618-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1618-1: Exim vulnerability

It was discovered that Exim incorrectly handled DKIM DNS decoding. This flaw could allow a remote attacker to execute arbitrary code...

Ethereal 0.8.40.8.50.8.6 tcpdump 3.43.5 alpha - DNS Decode (2)

Ethereal 0.8.40.8.50.8.6 tcpdump 3.43.5 alpha - DNS Decode 2 source: https://www.securityfocus.com/bid/1165/info A vulnerability exists in the DNS decode capabilities provided as part of the tcpdump sniffer, from LBL, as well as other sniffers, including Ethereal, by Gerald Combs. These sniffers...