65 matches found
Fedora 36 : unbound (2022-164cf7837e)
The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-164cf7837e advisory. - Fix CVE-2022-3204 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...
Fedora 35 : unbound (2022-204ee3da84)
The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-204ee3da84 advisory. - Fix CVE-2022-3204 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...
EulerOS 2.0 SP10 : unbound (EulerOS-SA-2022-2859)
According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The...
Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2022-2808)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : unbound (EulerOS-SA-2022-2808)
According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Unbound vulnerability (USN-5732-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5732-1 advisory. It was discovered that Unbound incorrectly handled delegations with a large number of non-responsive nameservers. A remote attacker could...
EulerOS 2.0 SP9 : unbound (EulerOS-SA-2022-2781)
According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the 'ghost domain names' attack. The vulnerability work...
FreeBSD : unbound -- Non-Responsive Delegation Attack (5a1c2e06-3fb7-11ed-a402-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5a1c2e06-3fb7-11ed-a402-b42e991fc52e advisory. - A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in...
CVE-2022-3204
A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The attack starts by querying a resolver for...
Hardcoded credentials
A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The attack starts by querying a resolver for...
CVE-2022-3204 NRDelegation Attack
A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The attack starts by querying a resolver for...
CVE-2022-3204
A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The attack starts by querying a resolver for...
CVE-2022-3204
A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The attack starts by querying a resolver for...
CVE-2022-3204
CVE-2022-3204 describes NRDelegation Attack affecting unbound. The issue allows/resource consumption via malicious delegations with many non-responsive NS records, leading to high CPU and potential DoS. Affected software is Unbound; fixes were introduced in version 1.16.3 and backported in subseq...
CVE-2022-3204
A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The attack starts by querying a resolver for...
unbound -- Non-Responsive Delegation Attack
A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The attack starts by querying a resolver for...
Code injection
A vulnerability has been identified in Nucleus NET All versions, Nucleus ReadyStart V3 All versions V2013.08, Nucleus Source Code Versions including affected DNS modules. The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS...
CVE-2021-27393
A vulnerability has been identified in Nucleus NET All versions, Nucleus ReadyStart V3 All versions V2013.08, Nucleus Source Code Versions including affected DNS modules. The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS...
PT-2021-17433
Name of the Vulnerable Software and Affected Versions Nucleus NET versions all Nucleus ReadyStart V3 versions prior to V2013.08 Nucleus Source Code versions including affected DNS modules Description A vulnerability has been identified where the DNS client does not properly randomize UDP port...