5976 matches found
idna.encode() DoS
The vulnerability of the idna.encode function in internationalized domain names in applications is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
USN-6791-1 unbound vulnerability
It was discovered that Unbound could take part in a denial of service amplification attack known as DNSBomb. This update introduces certain resource limits to make the impact from Unbound significantly lower...
PT-2024-14037 · Gnome · Gnome Captive Portal +3
Name of the Vulnerable Software and Affected Versions: GNOME Shell versions through 45.2 Description: The issue allows for unauthenticated remote code execution by intercepting two DNS requests, specifically the GNOME Network Manager and GNOME Shell Portal Helper connectivity checks, and respondi...
CVE-2024-5243
TP-Link Omada ER605 Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability. However, devices are...
Unbound DNS DDoS
The vulnerability of the Unbound DNS server relates to the possibility of generating an impulse flow of a large number of requests to the server, using responses from DNS resolvers. Exploiting this vulnerability allows a malicious actor to carry out a DDoS attack by utilizing DNS traffic...
bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources
A flaw was found in bind9. By flooding a DNSSEC resolver with responses coming from a DNSEC-signed zone using NSEC3, an attacker can lead the targeted resolver to a CPU exhaustion, further leading to a Denial of Service on the targeted host. This vulnerability applies only for systems where DNSSE...
bind9: Parsing large DNS messages may cause excessive CPU load
A flaw was found in the bind package. This issue may allow a remote attacker with no specific privileges to craft a specially long DNS message leading to an excessive and uncontrolled CPU usage, the server being unavailable, and a Denial of Service...
Important: unbound
Issue Overview: An issue was discovered in some DNS recursive resolvers that allows remote attackers to cause a denial of service using a maliciously designed authority and response amplification. CVE-2024-33655 Affected Packages: unbound Note: This advisory is applicable to Amazon Linux 2 -...
bind9: Parsing large DNS messages may cause excessive CPU load
A flaw was found in the bind package. This issue may allow a remote attacker with no specific privileges to craft a specially long DNS message leading to an excessive and uncontrolled CPU usage, the server being unavailable, and a Denial of Service...
Important: unbound
Issue Overview: An issue was discovered in some DNS recursive resolvers that allows remote attackers to cause a denial of service using a maliciously designed authority and response amplification. CVE-2024-33655 Affected Packages: unbound Note: This advisory is applicable to Amazon Linux 2 AL2 Co...
bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator
Processing specially crafted responses coming from DNSSEC-signed zones can lead to uncontrolled CPU usage, leading to a Denial of Service in the DNSSEC-validating resolver side. This vulnerability applies only for systems where DNSSEC validation is enabled...
Important: unbound
Issue Overview: An issue was discovered in some DNS recursive resolvers that allows remote attackers to cause a denial of service using a maliciously designed authority and response amplification. CVE-2024-33655 Affected Packages: unbound Issue Correction: Run dnf update unbound --releasever...
SUSE CVE-2024-33655
The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service resource consumption by arranging for DNS queries to be accumulated for seconds, such that responses are later sent in a pulsing burst which can be considered traffic amplification in some cases, aka the...
UBUNTU-CVE-2024-33655
The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service resource consumption by arranging for DNS queries to be accumulated for seconds, such that responses are later sent in a pulsing burst which can be considered traffic amplification in some cases, aka the...
AZL-40375 CVE-2024-24788 affecting package golang for versions less than 1.22.3-1
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
AZL-40436 CVE-2024-24788 affecting package msft-golang for versions less than 1.22.3
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
AZL-40471 CVE-2024-24788 affecting package golang for versions less than 1.22.3
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
AZL-40480 CVE-2024-24788 affecting package golang for versions less than 1.22.3-1
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
UBUNTU-CVE-2024-24788
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
CVE-2024-25560
When BIG-IP AFM is licensed and provisioned, undisclosed DNS traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...