DEBIAN-CVE-2017-1000381

The c-ares function aresparsenaptrreply, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way...

[SECURITY] Fedora 25 Update: bind-9.10.5-2.P2.fc25

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

The vulnerability of the `dns_packet_new` function in the system service of the `system-resolved` module of the Systemmd daemon in the Linux operating system allows a hacker to execute arbitrary code.

The vulnerability of the dnspacketnew function in the system service of the system-resolved manager in the Linux operating system is due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to cause the system-resolved service to...

UBUNTU-CVE-2017-3143

An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BIND 9.4.0-9.8.8, 9.9.0-9.9.10-P1,...

bind: Processing a response containing CNAME or DNAME with unusual order can crash resolver

A denial of service flaw was found in the way BIND handled a query response containing CNAME or DNAME resource records in an unusual order. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

bind: assertion failure while handling responses containing a DNAME answer

A denial of service flaw was found in the way BIND handled responses containing a DNAME answer. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

bind: assertion failure while handling a query response containing inconsistent DNSSEC information

A denial of service flaw was found in the way BIND handled a query response containing inconsistent DNSSEC information. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

bind: Processing a response containing CNAME or DNAME with unusual order can crash resolver

A denial of service flaw was found in the way BIND handled a query response containing CNAME or DNAME resource records in an unusual order. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

DEBIAN-CVE-2017-9445

In systemd through 233, certain sizes passed to dnspacketnew in systemd-resolved can cause it to allocate a buffer that's too small. A malicious DNS server can exploit this via a response with a specially crafted TCP payload to trick systemd-resolved into allocating a buffer that's too small, and...

Mozilla Firefox and Firefox ESR Forgery Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. Firefox ESR is an extended support version of Firefox. A forgery vulnerability exists in versions of Mozilla Firefox prior to 54 and Firefox ESR prior to 52.2. An attacker can exploit this vulnerability ...

UTstarcom WA3002G4 Unauthenticated DNS Change Vulnerability

UTStarcom is a provider of broadband DSLAM and DSL SMS hardware, their products are used to manage DSL via PPPoE, PPPoA and other modes, and the BAS 1000 provides service management for both broadband and narrowband from a single platform. A security vulnerability exists in the UTstarcom WA3002G4...

ISC BIND Remote Denial of Service Vulnerability (CNVD-2017-11804)

ISC BIND is a set of open source software that implements the DNS protocol maintained by the Internet Systems Consortium ISC. A remote denial of service vulnerability exists in ISC BIND. A remote attacker could exploit this vulnerability to cause a denial of service...

Beetel BCM96338 Router DNS Change Vulnerability

The Beetel BCM96338 is a router. A DNS change vulnerability exists in the Beetel BCM96338 router. An attacker can exploit the vulnerability to access sites and devices on vulnerable systems, redirecting to malicious sites...

D-Link DSL-2640U DNS Change Vulnerability

The D-Link DSL-2640U is a wireless router. An unauthenticated DNS change vulnerability exists in the D-Link DSL-2640U. An attacker can exploit the vulnerability to access sites and devices on vulnerable systems, redirecting to malicious sites...

Full-Fledged Phishing Framework: FirePhish

FirePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more. The features will continue to be expanded and will include website spoofing, click tracking, and extensive notification...

PT-2018-8426

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 54 Firefox ESR versions prior to 52.2 Thunderbird versions prior to 52.2 Description The issue affects the display of certain Tibetan characters in the address bar on OS X operating systems, potentially leading to...

Security vulnerabilities fixed in Firefox ESR 52.2 — Mozilla

A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node in the tree that no longer exists. This results in a potentially exploitable crash. A use-after-free vulnerability when using an incorrect URL during the...

ALPINE-CVE-2017-9345

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dns.c by trying to detect self-referencing pointers...

UBUNTU-CVE-2017-9217

systemd-resolved through 233 allows remote attackers to cause a denial of service daemon crash via a crafted DNS response with an empty question section...

HackerOne: WannaCrypt “Killswitch”

WannaCrypt a.k.a. WannaCry is the name of a malware used in the May 2017 global ransomware attack targeting Microsoft Windows operating systems via known vulnerabilities leaked by The Shadow Brokers. In MalwareTech’s research, it was found that the malware sends an HTTP request to a seemingly...