Windows DNS Server Remote Code Execution Vulnerability

...

Windows DNS Server Information Disclosure Vulnerability

...

CVE-2023-28254: Heap-based Buffer Overflow

Windows DNS Server Remote Code Execution Vulnerability...

PT-2023-2433 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server versions affected versions not specified Description: The issue is caused by a race condition situation. It allows a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no information about a...

PT-2023-2302 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to insufficient input validation in the Windows DNS server, which can be exploited by a remote attacker to execute arbitrary code. This can affect the system...

PT-2023-2438 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to insufficient input validation in the Windows DNS Server component, allowing a remote attacker to disclose protected information. This can lead to the...

PT-2023-2304 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server versions affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in Windows DNS Server, allowing a remote attacker to execute arbitrary code. This can...

CVE-2023-28306: Use After Free

Windows DNS Server Remote Code Execution Vulnerability...

CVE-2023-28255: Sensitive Data Storage in Improperly Locked Memory

Windows DNS Server Remote Code Execution Vulnerability...

CVE-2023-28256: Sensitive Data Storage in Improperly Locked Memory

Windows DNS Server Remote Code Execution Vulnerability...

CVE-2023-28307: Use After Free

Windows DNS Server Remote Code Execution Vulnerability...

CVE-2023-28278: Sensitive Data Storage in Improperly Locked Memory

Windows DNS Server Remote Code Execution Vulnerability...

CVE-2023-28277: Integer Overflow or Wraparound

Windows DNS Server Information Disclosure Vulnerability...

CVE-2023-28305: Use After Free

Windows DNS Server Remote Code Execution Vulnerability...

CVE-2023-28308: Use After Free

Windows DNS Server Remote Code Execution Vulnerability...

CVE-2022-25731 Incorrect Calculation of Buffer Size in MODEM

Information disclosure in modem due to buffer over-read while processing packets from DNS server...

CVE-2022-25731

CVE-2022-25731 concerns information disclosure in a modem component due to a buffer over-read while processing DNS server packets. The connected sources indicate the issue affects Qualcomm modem/chipset implementations (root cause described as incorrect buffer size calculation in the MODEM). Impa...

CVE-2022-25730 Buffer Over-read in MODEM

Information disclosure in modem due to improper check of IP type while processing DNS server query...

CVE-2022-25730 Buffer Over-read in MODEM

Information disclosure in modem due to improper check of IP type while processing DNS server query...

CVE-2022-25730

CVE-2022-25730 affects modem/Qualcomm chipsets due to an improper IP type check while processing DNS server queries, causing information disclosure. Root cause: erroneous handling of IP type in DNS processing. Impact per sources: confidentiality leakage; exploitability is network-based with low c...