Lucene search
K

25 matches found

The Hacker News
The Hacker News
added 2026/04/14 2:56 p.m.6 views

Google Adds Rust-Based DNS Parser into Pixel 10 Modem to Enhance Security

Google has announced the integration of a Rust-based Domain Name System DNS parser into the modem firmware as part of its ongoing efforts to beef up the security of Pixel devices and push memory-safe code at a more foundational level. "The new Rust-based DNS parser significantly reduces our...

9.8CVSS6.3AI score0.00318EPSS
Exploits0
NVD
NVD
added 2026/03/20 4:16 a.m.3 views

CVE-2026-32945

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a Heap-based Buffer Overflowvulnerability in the DNS parser's name length handler. Thisimpacts applications using PJSIP's built-in DNS resolver, such as those configured with...

9.8CVSS0.00308EPSS
Exploits1References2
UbuntuCve
UbuntuCve
added 2026/03/20 4:16 a.m.1 views

CVE-2026-32945

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a Heap-based Buffer Overflowvulnerability in the DNS parser's name length handler. Thisimpacts applications using PJSIP's built-in DNS resolver, such as those configured with...

9.8CVSS5.9AI score0.00308EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/03/20 3:54 a.m.20 views

CVE-2026-32945 PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a Heap-based Buffer Overflowvulnerability in the DNS parser's name length handler. Thisimpacts applications using PJSIP's built-in DNS resolver, such as those configured with...

8.4CVSS0.00308EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/03/20 3:54 a.m.2 views

CVE-2026-32945 PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a Heap-based Buffer Overflowvulnerability in the DNS parser's name length handler. Thisimpacts applications using PJSIP's built-in DNS resolver, such as those configured with...

8.4CVSS5.8AI score0.00308EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2026/03/20 3:54 a.m.2 views

CVE-2026-32945

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a Heap-based Buffer Overflowvulnerability in the DNS parser's name length handler. Thisimpacts applications using PJSIP's built-in DNS resolver, such as those configured with...

9.8CVSS5.4AI score0.00308EPSS
Exploits1
OSV
OSV
added 2026/03/20 3:54 a.m.2 views

CVE-2026-32945 PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a Heap-based Buffer Overflowvulnerability in the DNS parser's name length handler. Thisimpacts applications using PJSIP's built-in DNS resolver, such as those configured with...

8.4CVSS5.9AI score0.00308EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/03/20 12:0 a.m.3 views

PT-2026-26552

Name of the Vulnerable Software and Affected Versions PJSIP versions 2.16 and below Description PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below contain a Heap-based Buffer Overflow in the DNS parser's name length handler. This impacts...

9.8CVSS5.8AI score0.00308EPSS
Exploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-4513

Malware in sbrugna...

7.5CVSS8.5AI score0.02406EPSS
Exploits0References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2017-5842

Malware in sbrugna...

7.8CVSS7.4AI score0.02528EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2014-3980

Malicious code in bioql PyPI...

5.1CVSS7.3AI score0.1091EPSS
Exploits0References35
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2017-12995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print- domain.c:nsprint. CVE-2017-12995 Note that Nessus relies on the...

9.8CVSS7AI score0.02406EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:28 a.m.2 views

SUSE CVE-2014-3597

Multiple buffer overflows in the phpparserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS servers to cause a denial of service application crash or possibly execute arbitrary code via a crafted DNS record, related to the dnsgetrecord function and the...

6.8CVSS8.2AI score0.15427EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:57 a.m.2 views

SUSE CVE-2016-7993

A bug in util-print.c:reltsprint in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM...

9.8CVSS7.6AI score0.03292EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:41 a.m.2 views

SUSE CVE-2017-12995

The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:nsprint...

7.5CVSS7.1AI score0.02406EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2019/11/01 1:3 p.m.3 views

php: memcpy with negative length via crafted DNS response

An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dnsgetrecord misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects phpparser...

7.5CVSS7.5AI score0.04109EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2017/10/30 12:0 a.m.29 views

openSUSE Security Update : tcpdump (openSUSE-2017-1205)

This update for tcpdump to version 4.9.2 fixes several issues. These security issues were fixed : - CVE-2017-11108: Prevent remote attackers to cause DoS heap-based buffer over-read and application crash via crafted packet data. The crash occured in the EXTRACT16BITS function, called from the...

9.8CVSS7.7AI score0.06196EPSS
Exploits3References92
Prion
Prion
added 2017/09/14 6:29 a.m.12 views

Code injection

The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:nsprint...

5CVSS8.2AI score0.02406EPSS
Exploits0References7Affected Software1
NVD
NVD
added 2017/09/14 6:29 a.m.10 views

CVE-2017-12995

The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:nsprint...

9.8CVSS8.4AI score0.02406EPSS
Exploits0References7
CVE
CVE
added 2017/09/14 6:0 a.m.118 views

CVE-2017-12995

CVE-2017-12995 affects tcpdump’s DNS parser. A bug in print-domain.c:ns_print() could cause an infinite loop when parsing certain DNS data. The issue is fixed in tcpdump version 4.9.2; remediation is to upgrade to 4.9.2 or later. Other related advisories in connected documents confirm tcpdump vul...

9.8CVSS8.2AI score0.02406EPSS
Exploits0References7Affected Software1
Rows per page
Query Builder