444 matches found
Consul Cluster Peering can Result in Denial of Service
Summary A vulnerability was identified in Consul and Consul Enterprise “Consul” such that a peer cluster with service of the same name as a local service could corrupt Consul state, resulting in denial of service. This vulnerability, CVE-2023-1297, was resolved in Consul 1.14.7, and 1.15.3...
bind: processing large delegations may severely degrade resolver performance
A flaw was found in bind. When flooding the target resolver with special queries, an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service...
The vulnerability of the NSSwitch component of the Oracle Solaris operating system, related to errors in processing input data
The vulnerability of the NSSwitch component in the Oracle Solaris operating system is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
Remote code execution
Windows Domain Name Service Remote Code Execution Vulnerability...
CVE-2023-28223 Windows Domain Name Service Remote Code Execution Vulnerability
...
CVE-2023-28223
CVE-2023-28223 is a Windows DNS remote code execution vulnerability described in the CVE entry as a Windows DNS RCE with network access. The associated CVSS 3.1 metrics indicate an attacker can exploit it over the network without user interaction, but with high attack complexity and user privileg...
Windows Domain Name Service Remote Code Execution Vulnerability
...
PT-2023-2450 · Microsoft · Windows Dns +1
Name of the Vulnerable Software and Affected Versions: Windows Domain Name Service versions affected versions not specified Description: The issue is related to insufficient input validation in the Windows DNS service, allowing a remote attacker to execute arbitrary code using specially crafted...
The vulnerability of the Internet Storage Name Service (iSNS) for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Internet Storage Name Service iSNS on Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Internet Storage Name Service (iSNS) for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Internet Storage Name Service iSNS for Windows operating systems is related to insufficient protection of service data due to operations going beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
K16365: glibc vulnerability CVE-2014-9402
Security Advisory Description The nssdns implementation of getnetbyname in GNU C Library aka glibc before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service infinite loop by sending a positive answer while a network...
SUSE CVE-2014-3560
NetBIOS name services daemon nmbd in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in stringwrappers.h...
SUSE CVE-2014-8121
DBLOOKUP in nssfiles/files-XXX.c in the Name Service Switch NSS in GNU C Library aka glibc or libc6 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service infinite loop by performing a look-up on a database while iterating over it,...
SUSE CVE-2016-3075
Stack-based buffer overflow in the nssdns implementation of the getnetbyname function in GNU C Library aka glibc before 2.24 allows context-dependent attackers to cause a denial of service stack consumption and application crash via a long name...
SUSE CVE-2018-6764
util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module...
SUSE CVE-2022-0667
When the vulnerability is triggered the BIND process will exit. BIND 9.18.0...
CVE-2023-21697
Windows Internet Storage Name Service iSNS Server Information Disclosure Vulnerability...
CVE-2023-21697
Windows Internet Storage Name Service iSNS Server Information Disclosure Vulnerability...