Lucene search
+L

381 matches found

Tenable Nessus
Tenable Nessus
•added 2026/07/14 12:00 a.m.•13 views

EulerOS 2.0 SP10 : bind (EulerOS-SA-2026-2681)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU...

7.5CVSS7.4AI score0.01599EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/07/10 12:00 a.m.•21 views

EulerOS 2.0 SP12 : bind (EulerOS-SA-2026-2580)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU...

7.5CVSS7.4AI score0.01599EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/06/27 12:00 a.m.•18 views

EulerOS 2.0 SP15 : bind (EulerOS-SA-2026-2475)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU...

7.5CVSS7.4AI score0.01599EPSS
SaveExploits0References2
NVD
NVD
•added 2026/06/25 2:16 p.m.•17 views

CVE-2026-52690

Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail...

5.9CVSS0.00425EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2026/06/25 1:01 p.m.•34 views

CVE-2026-52690

Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail...

5.9CVSS5.9AI score0.00425EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/06/25 1:01 p.m.•26 views

CVE-2026-52690

Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail...

5.9CVSS5.9AI score0.00425EPSS
SaveExploits0
UbuntuCve
UbuntuCve
•added 2026/06/22 4:16 p.m.•15 views

CVE-2026-12725

A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an internal logging buffer. A remote attacker able to supply su...

5.9CVSS6.2AI score0.00528EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/06/22 1:55 p.m.•79 views

CVE-2026-12725 Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies

A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an internal logging buffer. A remote attacker able to supply su...

5.9CVSS0.00528EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/06/22 1:55 p.m.•12 views

CVE-2026-12725 Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies

A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an internal logging buffer. A remote attacker able to supply su...

5.9CVSS6.2AI score0.00528EPSS
SaveExploits0References2
CVE
CVE
•added 2026/06/22 1:55 p.m.•182 views

CVE-2026-12725

CVE-2026-12725 affects dnsmasq. The flaw is a heap-based buffer overflow in the log_query() path when DNSSEC validation and query logging are both enabled and DNS responses contain DS/DNSKEY records with unsupported algorithm or digest types. This can cause dnsmasq to write past the end of an int...

5.9CVSS6.2AI score0.00528EPSS
SaveExploits0References2Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/22 12:00 a.m.•3 views

CVE-2026-12725: Heap-based Buffer Overflow

A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an internal logging buffer. A remote attacker able to supply su...

5.9CVSS6.2AI score0.00528EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/06/20 12:00 a.m.•21 views

SUSE SLES12 Security Update : dnsmasq (SUSE-SU-2026:2458-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2458-1 advisory. This update for dnsmasq fixes the following issues - CVE-2026-2291: VU471747: dnsmasq can be abused to record false cached data enabling DoS or...

8.8CVSS7AI score0.01068EPSS
SaveExploits4References22
SUSE Linux
SUSE Linux
•added 2026/06/18 3:54 p.m.•18 views

Security update for dnsmasq

This update for dnsmasq fixes the following issues CVE-2026-2291: VU471747: dnsmasq can be abused to record false cached data enabling DoS or attacker redirect bsc1258251. CVE-2026-4890: DoS vulnerability in the DNSSEC validation bsc1265001. CVE-2026-4891: heap-based out-of-bounds read...

9.2CVSS7AI score0.01068EPSS
SaveExploits4References28
OSV
OSV
•added 2026/06/18 3:54 p.m.•12 views

SUSE-SU-2026:2458-1 Security update for dnsmasq

This update for dnsmasq fixes the following issues - CVE-2026-2291: VU471747: dnsmasq can be abused to record false cached data enabling DoS or attacker redirect bsc1258251. - CVE-2026-4890: DoS vulnerability in the DNSSEC validation bsc1265001. - CVE-2026-4891: heap-based out-of-bounds read...

8.8CVSS7.1AI score0.01068EPSS
SaveExploits4References15
OSV
OSV
•added 2026/06/18 2:32 p.m.•10 views

SUSE-SU-2026:22213-1 Security update for unbound

This update for unbound fixes the following issues - CVE-2026-32792: Packet of death with DNSCrypt bsc1265583. - CVE-2026-33278: Possible remote code execution during DNSSEC validation bsc1265587. - CVE-2026-40622: "Ghost domain name" variant bsc1265581. - CVE-2026-41292: Parsing a long list of...

10CVSS7.4AI score0.01133EPSS
SaveExploits0References23
OSV
OSV
•added 2026/06/18 2:31 p.m.•9 views

OPENSUSE-SU-2026:21083-1 Security update for unbound

This update for unbound fixes the following issues - CVE-2026-32792: Packet of death with DNSCrypt bsc1265583. - CVE-2026-33278: Possible remote code execution during DNSSEC validation bsc1265587. - CVE-2026-40622: "Ghost domain name" variant bsc1265581. - CVE-2026-41292: Parsing a long list of...

10CVSS7.4AI score0.01133EPSS
SaveExploits0References22
Tenable Nessus
Tenable Nessus
•added 2026/06/14 12:00 a.m.•20 views

SUSE SLES15 Security Update : unbound (SUSE-SU-2026:2369-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2369-1 advisory. This update for unbound fixes the following issues - CVE-2026-32792: Packet of death with DNSCrypt bsc1265583. - CVE-2026-33278:...

10CVSS7.3AI score0.01133EPSS
SaveExploits0References34
Tenable Nessus
Tenable Nessus
•added 2026/06/12 12:00 a.m.•29 views

EulerOS Virtualization 2.13.0 : bind (EulerOS-SA-2026-2395)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU...

7.5CVSS7.3AI score0.01599EPSS
SaveExploits0References2
SUSE Linux
SUSE Linux
•added 2026/06/11 12:22 p.m.•17 views

Security update for unbound

This update for unbound fixes the following issues CVE-2026-32792: Packet of death with DNSCrypt bsc1265583. CVE-2026-33278: Possible remote code execution during DNSSEC validation bsc1265587. CVE-2026-40622: "Ghost domain name" variant bsc1265581. CVE-2026-41292: Parsing a long list of incoming...

8.6CVSS7.3AI score0.01133EPSS
SaveExploits0References44
OSV
OSV
•added 2026/06/11 12:22 p.m.•13 views

SUSE-SU-2026:2369-1 Security update for unbound

This update for unbound fixes the following issues - CVE-2026-32792: Packet of death with DNSCrypt bsc1265583. - CVE-2026-33278: Possible remote code execution during DNSSEC validation bsc1265587. - CVE-2026-40622: 'Ghost domain name' variant bsc1265581. - CVE-2026-41292: Parsing a long list of...

10CVSS7.4AI score0.01133EPSS
SaveExploits0References23
Rows per page
Query Builder