336 matches found
CVE-2023-29483
eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in whic...
CVE-2023-29483
eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in whic...
CVE-2023-29483
eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in whic...
CVE-2023-29483
eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in whic...
AZL-40034 CVE-2024-29018 affecting package moby-engine for versions less than 24.0.9-9
Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. Moby's networking implementation allows for many networks, each with their own IP address range and gateway, to be defined. This feature i...
PT-2023-22119 · Unknown · Operating System
Name of the Vulnerable Software and Affected Versions: Operating System affected versions not specified Description: The issue arises when the Operating System hosting the FACSChorus application is configured to allow transmission of hashed user credentials without properly validating the identit...
CVE-2023-5978
CVE-2023-5978 affects FreeBSD 13-RELEASE up to 13-RELEASE-p4 where the cap_net libcasper(3) service incorrectly validates updated constraint lists, allowing an application that specifies only a resolvable domain list to submit a new list including previously unlisted domains and thus resolve doma...
FreeBSD Security Vulnerabilities
FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD versions 13-RELEASE up to and including 13-RELEASE-p5, which stems from allowing applications to resolve previously restricted domain names...
DEBIAN-CVE-2023-38545
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host na...
CVE-2023-38545
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host na...
glibc Resource Management Error Vulnerability
glibc GNU C Library is a C standard library implemented by a GNU project of the GNU community. A resource management error vulnerability exists in glibc, which stems from the fact that when an NSS module implements only the nssgethostbyname2r hooks but not the nssgethostbyname3r hooks, the...
USN-6164-2: c-ares vulnerabilities
USN-6164-1 fixed several vulnerabilities in c-ares. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Hannes Moesl discovered that c-ares incorrectly handled certain ipv6 addresses. An attacker could use this issue to cause c-ares ...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : MaraDNS vulnerabilities (USN-6271-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6271-1 advisory. Xiang Li discovered that MaraDNS incorrectly handled certain inputs. If a user or an automated system were...
The vulnerability in the implementation of the Peer Name Resolution protocol in the Windows operating system allows a perpetrator to carry out a DoS attack.
The vulnerability of the Windows operating system’s Peer Name Resolution protocol is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute a DoS Denial-of-Service attack...
CVE-2023-35338
Windows Peer Name Resolution Protocol Denial of Service Vulnerability...
CVE-2023-35338
Windows Peer Name Resolution Protocol Denial of Service Vulnerability...
CVE-2023-35338
Windows Peer Name Resolution Protocol Denial of Service Vulnerability...
Denial of service
Windows Peer Name Resolution Protocol Denial of Service Vulnerability...
CVE-2023-35338
Technical details for CVE-2023-35338 (affected components, root cause, exploits, or fixes) are not provided in the connected documents. Monitor for updates from official sources.