Lucene search
K

31 matches found

ATTACKERKB
ATTACKERKB
added 2026/02/12 9:48 p.m.3 views

CVE-2026-26076

ntpd-rs is a full-featured implementation of the Network Time Protocol. Prior to 1.7.1, an attacker can remotely induce moderate increases 2-4 times above normal in cpu usage. When having NTS enabled on an ntpd-rs server, an attacker can create malformed NTS packets that take significantly more...

6.9CVSS5.6AI score0.00349EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/12 12:0 a.m.3 views

PT-2026-7912

Name of the Vulnerable Software and Affected Versions ntpd-rs versions prior to 1.7.1 Description ntpd-rs is a full-featured implementation of the Network Time Protocol. An attacker can remotely cause moderate increases in CPU usage 2-4 times above normal. When Network Time System NTS is enabled ...

7.5CVSS5.9AI score0.00349EPSS
Exploits0References14
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.6 views

MiracleLinux 9 : bind-9.16.23-11.el9 (AXSA:2023-5457:04)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5457:04 advisory. bind: processing large delegations may severely degrade resolver performance CVE-2022-2795 bind: flooding with UPDATE requests may lead to DoS...

7.5CVSS7.9AI score0.5017EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.5 views

MiracleLinux 7 : bind-9.11.4-26.P2.13.0.1.el7.AXS7 (AXSA:2023-4859:03)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-4859:03 advisory. bind: DNS forwarders - cache poisoning vulnerability CVE-2021-25220 bind: processing large delegations may severely degrade resolver performance...

6.8CVSS8AI score0.0325EPSS
Exploits0References3
OSV
OSV
added 2025/10/15 4:15 p.m.3 views

CVE-2025-2529

Applications using affected versions of Ehcache 3.x can experience degraded cache-write performance if the application using Ehcache utilizes keys sourced from malicious external parties in an unfiltered/unsalted way...

3.7CVSS5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2025/10/04 12:0 a.m.4 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the use of an unsafe skb release function in an interrupt context, which could lead to kernel warnings and...

5AI score0.00145EPSS
Exploits0References10
CNNVD
CNNVD
added 2025/08/01 12:0 a.m.5 views

OpenEXR 安全漏洞

OpenEXR is an open standard for high dynamic range image HDR file formats. A security vulnerability exists in OpenEXR version 3.3.2, which can be exploited by attackers to cause excessive memory allocation and performance degradation when processing malicious files...

5.5CVSS6.4AI score0.00242EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/03/07 6:43 p.m.6 views

CVE-2025-27513

OpenTelemetry dotnet is a dotnet telemetry framework. A vulnerability in OpenTelemetry.Api package 1.10.0 to 1.11.1 could cause a Denial of Service DoS when a tracestate and traceparent header is received. Even if an application does not explicitly use trace context propagation, receiving these...

7.5CVSS6.8AI score0.00468EPSS
Exploits0References1
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.3 views

Astra Linux – Vulnerability in bind9

Resolver caches and authoritative zone databases that hold a significant number of Resource Records for the same hostname of any RTYPE may experience degraded performance as content is added or updated, as well as when handling client queries for this name. This issue affects BIND 9 versions 9.11...

7.5CVSS7.5AI score0.02114EPSS
Exploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/21 10:2 p.m.24 views

Security Bulletin: IBM Technical Support Appliance - possible degraded performance or excessive CPU usage

Summary Domain Name Service DNS messaging is used to resolve hostnames to IP addresses. Vulnerability Details CVEID:CVE-2024-1737 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by an error when content is being added or updated in resolver caches and authoritative zone databas...

7.5CVSS7.2AI score0.02114EPSS
Exploits0Affected Software1
OpenVAS
OpenVAS
added 2024/10/28 12:0 a.m.18 views

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2024-2765)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.2AI score0.02114EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/10/28 12:0 a.m.16 views

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2024-2747)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.2AI score0.02114EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/09 12:0 a.m.18 views

EulerOS 2.0 SP12 : bind (EulerOS-SA-2024-2496)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname of any RTYPE can suffer from degraded...

7.5CVSS7.9AI score0.02114EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2024/10/09 12:0 a.m.19 views

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2024-2496)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.2AI score0.02114EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/10/09 12:0 a.m.11 views

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2024-2520)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.2AI score0.02114EPSS
Exploits0References2
F5 Networks
F5 Networks
added 2024/08/17 3:39 a.m.27 views

K000140732: BIND vulnerability CVE-2024-1737

Security Advisory Description Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname of any RTYPE can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name. This issue affects...

7.5CVSS8.7AI score0.02114EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/08/17 12:0 a.m.28 views

Amazon Linux 2 : bind (ALAS-2024-2616)

The version of bind installed on the remote host is prior to 9.11.4-26.P2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2616 advisory. Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname of any RTYPE...

7.5CVSS7.9AI score0.02114EPSS
Exploits0References6
Amazon
Amazon
added 2024/08/06 12:0 a.m.35 views

Important: bind

Issue Overview: Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname of any RTYPE can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name. This issue affects BIND 9 versio...

7.5CVSS8AI score0.02114EPSS
Exploits0
NVD
NVD
added 2024/07/23 3:15 p.m.16 views

CVE-2024-1737

Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname of any RTYPE can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name. This issue affects BIND 9 versions 9.11.0 throug...

7.5CVSS0.02114EPSS
Exploits0References5
OSV
OSV
added 2024/07/23 3:15 p.m.1 views

ALPINE-CVE-2024-1737

Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname of any RTYPE can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name. This issue affects BIND 9 versions 9.11.0 throug...

7.5CVSS7AI score0.02114EPSS
Exploits0References1
Rows per page
Query Builder