5976 matches found
MaraDNS 数字错误漏洞
MaraDNS is an open source implementation of the Domain Name System by the individual developer Sam Trenholme that can be used as a caching, recursive or authoritative name server. A numeric error vulnerability exists in MaraDNS 3.5.0024 and earlier versions, which stems from a remotely exploitabl...
PT-2023-7445 · Canon · I-Sensys Mf640C Series +10
Name of the Vulnerable Software and Affected Versions: Canon imageCLASS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware versions prior to Ver.11.05 Canon imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware versions prior to...
CVE-2023-28742
When DNS is provisioned, an authenticated remote command execution vulnerability exists in DNS iQuery mesh. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
New Decoy Dog Malware Toolkit Uncovered: Targeting Enterprise Networks
An analysis of over 70 billion DNS records has led to the discovery of a new sophisticated malware toolkit dubbed Decoy Dog targeting enterprise networks. Decoy Dog , as the name implies, is evasive and employs techniques like strategic domain aging and DNS query dribbling, wherein a series of...
DNS wire format AND DNS label-sequence format ARE USED INTERCHANGABLY TO REPRESENT DOMAIN NAMES DURING RRSet VALIDATION
Lines of code Vulnerability details Impact @param name The name to claim, in DNS wire format. above format is used in DNSRegistrar.proveAndClaim and DNSRegistrar.proveAndClaimWithResolver functions @param name The name of the RRSIG record, in DNS label-sequence format. above format is used in...
Fully qualified domain names are incorrectly resolved
Lines of code Vulnerability details Impact A relative domain name like foo.eth becomes fully qualified if it ends with a dot, e.g. foo.eth., although this might seem unfamiliar to some, it's the standard and part of the DNS specification, see Fully qualified domain name, Trailing Dots in Domain...
SmartDNS 缓冲区错误漏洞
SmartDNS is a DNS server running locally by Nick Peng Personal Developer. A security vulnerability exists in SmartDNS version v41 and prior versions, which stems from the presence of a stack-based buffer overflow that allows out-of-bounds writes via specially crafted DNS requests...
CVE-2022-47758
Nanoleaf firmware v7.1.1 and below is missing TLS verification, allowing attackers to execute arbitrary code via a DNS hijacking attack...
Dnsmasq Unlimited Resource Allocation DoS
The vulnerability of the Dnsmasq DNS server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
PT-2023-15476 · Nanoleaf · Nanoleaf
Name of the Vulnerable Software and Affected Versions: Nanoleaf firmware versions prior to 7.1.1 Description: The issue is related to missing TLS verification, allowing attackers to execute arbitrary code via a DNS hijacking attack. This affects IoT smart lights, enabling unauthenticated remote...
DNS Server Disclosure Windows
The vulnerability of the DNS Server component of the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that should be protected...
DNS service Windows Code Execution
The vulnerability of the Windows operating system’s DNS service is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted input data...
Windows DNS Server RCE
The vulnerability of the Windows operating system’s DNS server arises from a “race condition”. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Windows DNS Server RCE
The vulnerability of the Windows operating system’s DNS server arises from a “race condition”. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
USN-6034-1 dnsmasq vulnerability
It was discovered that Dnsmasq was sending large DNS messages over UDP, possibly causing transmission failures due to IP fragmentation. This update lowers the default maximum size of DNS messages to improve transmission reliability over UDP...
DNS BIND DoS
The vulnerability of the BIND DNS server relates to the processing of the Write Directive DS. BIND waits for this processing to complete, or until the timeout interval expires. As a result, the resumedslookup function is called, but it does not check whether the previous selection has been...
BIND DNS Server Resource Leak DoS
The vulnerability of the BIND DNS server relates to improper termination of resources or resource release, which leads to incomplete cleanup. Exploiting this vulnerability allows a malicious actor to send specially crafted TCP packets with ‘keep-response-order’ enabled. This can result in...
DNS Server Microsoft Windows Code Execution
The vulnerability of the DNS server of the Microsoft Windows operating system arises from a “race condition”. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
BIND DNS Server DoS
The vulnerability of the BIND DNS server relates to the possibility of exploiting certain vulnerabilities during DNS query processing. Exploiting this vulnerability allows a malicious actor to send repetitive request patterns to servers with enabled DNSSEC-Vvalidated Cache synth-from-dnssec,...
