5966 matches found
unbound: infinite loop via malformed DNS answers received from upstream servers
A flaw was found in unbound in versions prior to 1.10.1. An infinite loop can be created when malformed DNS answers are received from upstream servers. The highest threat from this vulnerability is to system availability...
GitLab Authorization Issues Vulnerability (CNVD-2021-19409)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An authorization issue vulnerability exists in GitLab...
CVE-2020-13159: Improper Neutralization of Special Elements used in an OS Command
Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclientmac, Hostname, or Alias field. NOTE: this may overlap CVE-2020-10818...
PT-2020-13364
Name of the Vulnerable Software and Affected Versions Artica Proxy versions prior to 4.30.000000 Community Edition Description The issue allows OS command injection through specific fields, including the Netbios name, Server domain name, dhclient mac, Hostname, or Alias field. Recommendations For...
Unspecified Vulnerability in Mattermost Server (CNVD-2020-41490)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 5.8.0 that stems from the program not following domain name requirements when processing join requests for public teams. An...
Exploit for OS Command Injection in Articatech Artica_Proxy
CVE-2020-13159 - Artica Proxy before 4.30.000000 Community Edi...
chromium-browser: Incorrect security UI in site information
Insufficient data validation in site information in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted domain name...
HashiCorp Consul Buffer Overflow Vulnerability
HashiCorp Consul is a distributed, highly available data center-aware solution. The product is used to connect and provision applications across dynamically distributed infrastructures. A buffer overflow vulnerability exists in the HTTP API and DNS in HashiCorp Consul and Consul Enterprise that...
DEBIAN-CVE-2020-13250
HashiCorp Consul and Consul Enterprise include an HTTP API introduced in 1.2.0 and DNS introduced in 1.4.3 caching feature that was vulnerable to denial of service. Fixed in 1.6.6 and 1.7.4...
Unspecified Vulnerability in D-Link DIR-600M and DSL 2730-U
The D-Link DIR-600M and the D-Link DSL 2730-U are both wireless routers from AUO D-Link of Taiwan, China. A security vulnerability exists in the DNS resolver search path in the D-Link DSL 2730-U IN1.10 version, IN1.11 version, and DIR-600M 3.04 version. A remote attacker could exploit this...
CVE-2020-13960
D-Link DSL 2730-U IN1.10 and IN1.11 and DIR-600M 3.04 devices have the domain.name string in the DNS resolver search path by default, which allows remote attackers to provide valid DNS responses and also offer Internet services such as HTTP for names that otherwise would have had an NXDOMAIN erro...
unbound: amplification of an incoming query into a large number of queries directed to a target
A network amplification vulnerability was found in Unbound, in the way it processes delegation messages from one authoritative zone to another. This flaw allows an attacker to cause a denial of service or be part of an attack against another DNS server when Unbound is deployed as a recursive...
unbound: infinite loop via malformed DNS answers received from upstream servers
A flaw was found in unbound in versions prior to 1.10.1. An infinite loop can be created when malformed DNS answers are received from upstream servers. The highest threat from this vulnerability is to system availability...
unbound: infinite loop via malformed DNS answers received from upstream servers
A flaw was found in unbound in versions prior to 1.10.1. An infinite loop can be created when malformed DNS answers are received from upstream servers. The highest threat from this vulnerability is to system availability...
XACK DNS Denial of Service Vulnerability
XACK DNS is a carrier-oriented DNS Domain Name System server from XACK Japan. A security vulnerability exists in XACK DNS. A remote attacker can exploit the vulnerability to degrade the performance of the recursive parser or use the recursive parser as a reflector to conduct a reflection attack...
Important: Red Hat Security Advisory: bind security update
An update for bind is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
bind: BIND does not sufficiently limit the number of fetches performed when processing referrals
A flaw was found in BIND, where it does not sufficiently limit the number of fetches that can be performed while processing a referral response. This flaw allows an attacker to cause a denial of service attack. The attacker can also exploit this behavior to use the recursing server as a reflector...
bind: BIND does not sufficiently limit the number of fetches performed when processing referrals
A flaw was found in BIND, where it does not sufficiently limit the number of fetches that can be performed while processing a referral response. This flaw allows an attacker to cause a denial of service attack. The attacker can also exploit this behavior to use the recursing server as a reflector...
The vulnerability of the DNS server service in Windows Server operating systems allows a perpetrator to trigger a distributed service failure.
The vulnerability of the DNS server service in Windows Server operating systems is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to trigger a distributed service failure remotely...