5965 matches found
Input checksum vulnerability in several Huawei switches
The S5700 series switches are Huawei's full Gigabit Ethernet switches for large-bandwidth access and Ethernet multi-service aggregation. the S12700 series switches are agile switches specially designed and developed for the core of next-generation campus networks. An input checksum vulnerability...
DNS BIND server vulnerability, allowing attackers to cause service failures
The vulnerability in the resolver.c function of the BIND DNS server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause a service failure—such as the appearance of an error message indicating “Assertion failure” or the termination o...
DNS BIND server vulnerability, allowing attackers to cause service failures
The vulnerability of the BIND DNS server component exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures—such as the appearance of an “Assertion Failure” error and the termination of the daemon—by using a specially...
DEBIAN-CVE-2011-4600
The networkReloadIptablesRules function in network/bridgedriver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a 1 DNS or 2 DHCP query...
The vulnerability of Amped Wireless R10000’s microprogramming software allows a hacker to replace the response to a request.
The vulnerability of Amped Wireless R10000’s microprogramming software lies in the use of an inappropriate algorithm for selecting the ID value in DNS requests. Exploiting this vulnerability allows a remote attacker to replace the response to a request...
The vulnerability of the microprogrammed software of the N600 DB Belkin F9K1102 allows a hacker to replace the responses to requests.
The vulnerability of the N600 DB Belkin F9K1102 router’s microprogramming software exists due to the use of an incorrect algorithm for selecting the value of the ID in the DNS query header. Exploiting this vulnerability allows a malicious actor to replace the responses to queries by predicting th...
The vulnerability of the Samba file system allows a perpetrator to obtain confidential information or cause service interruptions.
The vulnerability of the internal DNS server of the Samba file system arises due to buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure reading beyond the memory limit or obtain confidential information by loading a specially...
DEBIAN-CVE-2015-8702
The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service netsplit via an invalid character in a PTR response, as demonstrated by a "\032" whitespace character in a hostname...
bind: malformed signature records for DNAME records can trigger assertion failure
A denial of service flaw was found in the way BIND parsed signature records for DNAME records. By sending a specially crafted query, a remote attacker could use this flaw to cause named to crash...
The vulnerability of the Nginx proxy server allows attackers to induce a service failure.
The vulnerability of the Nginx proxy server is related to pointer dereferencing errors. Exploiting this vulnerability allows a malicious actor to cause a service failure incorrect pointer dereferencing and emergency termination of operations through a specially crafted UDP DNS response...
[SECURITY] Fedora 24 Update: bind-9.10.3-12.P4.fc24
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...
bind: malformed signature records for DNAME records can trigger assertion failure
A denial of service flaw was found in the way BIND parsed signature records for DNAME records. By sending a specially crafted query, a remote attacker could use this flaw to cause named to crash...
Typosquatters Target Mac Users With New .OM Domain Scam
Typosquatters are targeting Apple computer users with malware in a recent campaign that snares clumsy web surfers who mistakenly type .om instead of .com when surfing the web. According to Endgame security researchers, the top level domain for Middle Eastern country Oman .om is being exploited by...
DEBIAN-CVE-2016-0771
The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service out-of-bounds read or possibly obtain sensitive information from process memory by...
PT-2016-3346
Name of the Vulnerable Software and Affected Versions BusyBox versions prior to 1.25.0 Description The issue is related to an integer overflow in the DHCP client udhcpc of BusyBox, which allows remote attackers to cause a denial of service crash via a malformed RFC1035-encoded domain name. This...
ISC BIND Query Packet Cookie Option Denial of Service Vulnerability
ISC BIND is a set of open source software that implements the DNS protocol. BIND 9.10 provides native support for DNS cookies or user identification, a mechanism designed to protect the security of the query requestor and domain name servers when they interact. An attacker can maliciously constru...
ISC BIND rndc Control Instance Denial of Service Vulnerability
ISC BIND is a set of open source software that implements the DNS protocol. A design flaw in the BIND rndc control instance's handling of request input can lead to an assertion failure in sexpr.c or alist.c, which can ultimately lead to the exit of the named process when a malformed packet is sen...
UBUNTU-CVE-2016-1286
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted signature record for a DNAME record, related to db.c and resolver.c...
UBUNTU-CVE-2016-0771
The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service out-of-bounds read or possibly obtain sensitive information from process memory by...
