Security Bulletin: GNU C library (glibc) vulnerabilities affect IBM SmartCloud Entry (CVE-2014-8121)

Summary IBM SmartCloud Entry is vulnerable to GNU C library glibc vulnerabilities. Remote attackers can exploit them to cause the application to enter into an infinite loop. Vulnerability Details CVEID: CVE-2014-8121 DESCRIPTION: GNU C Library glibc is vulnerable to a denial of service, caused by...

DEBIAN-CVE-2020-13250

HashiCorp Consul and Consul Enterprise include an HTTP API introduced in 1.2.0 and DNS introduced in 1.4.3 caching feature that was vulnerable to denial of service. Fixed in 1.6.6 and 1.7.4...

Denial Of Service (DoS)

The scsi-target-utils package is vulnerable to Denial Of Service DoS. Due to buffer overflow flaws found in scsi-target-utils' tgtd daemon,a remote attacker could trigger these flaws by sending a carefully-crafted Internet Storage Name Service iSNS request, causing the tgtd daemon to crash...

CVE-2019-5105

An exploitable memory corruption vulnerability exists in the Name Service Client functionality of 3S-Smart Software Solutions CODESYS GatewayService. A specially crafted packet can cause a large memcpy, resulting in an access violation and termination of the process. An attacker can send a packet...

CVE-2019-5105

A memory‑corruption vulnerability exists in the 3S-Smart CODESYS GatewayService Name Service Client. A crafted packet can trigger a large memcpy, causing an access violation and process termination. The issue affects all CODESYS V3 products prior to V3.5.16.10 that contain CmpRouter or CmpRouterE...

3S-Smart Software Solutions CODESYS GatewayService Buffer Overflow Vulnerability

3S-Smart Software Solutions CODESYS GatewayService is a gateway service for use in CODESYS products from 3S-Smart Software Solutions, Germany. A buffer overflow vulnerability exists in the Name Service Client feature in 3S-Smart Software Solutions CODESYS GatewayService version 3.5.13.20, which c...

3S-Smart Software Solutions CODESYS GatewayService memory corruption vulnerability

Summary An exploitable memory corruption vulnerability exists in the Name Service Client functionality of 3S-Smart Software Solutions CODESYS GatewayService. A specially crafted packet can cause a large memcpy, resulting in an access violation and termination of the process. An attacker can send ...

UBUNTU-CVE-2020-6077

An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing mDNS messages, the implementation does not properly keep track of the available data in the message, possibly leading to an out-of-bounds read that would result ...

CVE-2020-5232 Ethereum Name Service - Malicious takeover of previously owned ENS names

A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry...

PT-2020-18328 · Ethereum · Ethereum Name Service (Ens) Registry

Name of the Vulnerable Software and Affected Versions: Ethereum Name Service ENS registry affected versions not specified Description: A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owner's consent ...

USN-4217-2 samba vulnerabilities

USN-4217-1 fixed several vulnerabilities in Samba. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Andreas Oster discovered that the Samba DNS management server incorrectly handled certain records. An authenticated attacker could possibly use this...

Heap corruption vulnerability in Xiaomi AI Speaker-mDNS service

Xiaomi AI Speaker is a smart speaker product from Xiaomi. A heap corruption vulnerability exists in the Xiaomi AI Speaker-mDNS service. The vulnerability is due to the program service in the parsing of the request message there is a boundary check is not strict, resulting in the arbitrary write o...

Xiaomi AI Speaker-mDNS service suffers from denial of service vulnerability

Xiaomi AI Speaker is a smart speaker product from Xiaomi. A denial of service vulnerability exists in the Xiaomi AI Speaker-mDNS service. The vulnerability is caused by the program service failing to adequately determine malformed messages when parsing request messages, causing the parsing thread...

EulerOS Virtualization 3.0.1.0 : glibc (EulerOS-SA-2019-1551)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - stdlib/canonicalize.c in the GNU C Library aka glibc or libc6 2.27 and earlier, when processing very long pathname arguments to th...

F5 Networks BIG-IP : glibc vulnerability (K16365)

The nssdns implementation of getnetbyname in GNU C Library aka glibc before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service infinite loop by sending a positive answer while a network name is being process...

Security Bulletin: Vulnerability in Open Source GNU glibc affects IBM OS Images for Red Hat Linux Systems. (CVE-2015-5277)

Summary A vulnerability in Open Source GNU glibc affects IBM OS Images for Red Hat Linux Systems. Vulnerability Details CVEID: CVE-2015-5277 DESCRIPTION: GNU C Library glibc could allow a local attacker to gain elevated privileges on the system, caused by a heap corruption error in the nssfiles...

glibc: denial of service in getnetbyname function

The nssdns implementation of getnetbyname in GNU C Library aka glibc before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service infinite loop by sending a positive answer while a network name is being process...

Solaris 10 (sparc) : 149646-02

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Name Service Cache Daemon NSCD. Supported versions that are affected are 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can...

Solaris 10 (x86) : 149647-02

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Name Service Cache Daemon NSCD. Supported versions that are affected are 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can...

UBUNTU-CVE-2018-6764

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module...