Lucene search
+L

2971 matches found

Positive Technologies
Positive Technologies
added 2023/12/18 12:0 a.m.3 views

PT-2023-8401 · Unknown +5 · Dns Server +5

Name of the Vulnerable Software and Affected Versions: DNS server affected versions not specified Description: The issue is caused by an improper check for RDLENGTH overflow in the buffer in response from the DNS server. This can lead to a buffer overflow. The vulnerability is related to...

9.9CVSS6.4AI score0.01606EPSS
SaveExploits3References103
RedHat Linux
RedHat Linux
added 2023/12/14 2:34 p.m.6 views

avahi: Reachable assertion in avahi_dns_packet_append_record

A vulnerability was found in Avahi, where a reachable assertion exists in avahidnspacketappendrecord...

6.2CVSS5.7AI score0.00319EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/12/12 12:0 a.m.8 views

Microsoft Windows DNS Security Vulnerability

Microsoft Windows DNS is a domain name resolution service from Microsoft. The Domain Name System DNS is one of the industry-standard suite of protocols that encompasses TCP/IP, and DNS clients and DNS servers work together to provide computers and users with name resolution services that map...

7.5CVSS8.8AI score0.01563EPSS
SaveExploits0References3
CNVD
CNVD
added 2023/12/08 12:0 a.m.7 views

GNU Binutils Excessive Memory Consumption Vulnerability

GNU Binutils is a set of binary tools developed by the GNU Project, mainly used to deal with target files e.g., executables, libraries, etc., covering compilation, linking, debugging, and other phases of the function. GNU Binutils suffers from an excessive memory consumption vulnerability, which...

5.5CVSS7AI score0.00483EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.9 views

The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanisms, as well as the software products such as BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Orchestrator, allows a perpetrator to trigger a service failure.

The vulnerabilities of the BIG-IP Access Policy Manager, as well as the BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link...

7.8CVSS7.2AI score0.00626EPSS
SaveExploits0References3Affected Software13
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.15 views

The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanisms, as well as the software products such as BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Orchestrator, allows a perpetrator to trigger a service failure.

The vulnerabilities of the BIG-IP Access Policy Manager, as well as the BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link...

7.8CVSS7.5AI score0.00626EPSS
SaveExploits0References3Affected Software12
BDU FSTEC
BDU FSTEC
added 2023/12/04 12:0 a.m.9 views

The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanisms, as well as the software products such as BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Orchestrator, allows a perpetrator to trigger a service failure.

The vulnerabilities of the BIG-IP Access Policy Manager, as well as the BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link...

7.8CVSS7.4AI score0.00626EPSS
SaveExploits0References3Affected Software12
RedHat Linux
RedHat Linux
added 2023/11/14 4:8 p.m.127 views

Moderate: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

7.5CVSS7.1AI score0.13213EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2023/11/14 3:53 p.m.8 views

dnsmasq: default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232

A flaw was found in Dnsmasq. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020...

7.5CVSS5.7AI score0.01345EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.9 views

The vulnerability in the str2host.c component of the DNS library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the str2host.c component in the DNS library involves a repeated memory release mechanism. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause service interruptions...

10CVSS7.7AI score0.02297EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.7 views

The vulnerability of the DNS BIND server, related to insufficient validation of input data, allows attackers to cause service failures.

The vulnerability of the DNS BIND server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures...

7.8CVSS7.5AI score0.48707EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.10 views

The vulnerability of the DNS BIND server, related to the lack of use of the assert() function, allows a hacker to trigger a service failure.

The vulnerability of the DNS BIND server is related to the lack of use of the assert function. Exploiting this vulnerability allows a remote attacker to cause service failures...

7.8CVSS7.6AI score0.16115EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/11/10 12:0 a.m.9 views

The vulnerability of the Wi-Fi router software of Zyxel NBG7510, related to access control deficiencies, allows a intruder to gain access to the DNS server.

The vulnerability of the Zyxel NBG7510 Wi-Fi router’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to gain access to the DNS server...

10CVSS7.8AI score0.00613EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2023/11/07 8:52 a.m.8 views

qt: buffer over-read via a crafted reply from a DNS server

A vulnerability was discovered in Qt. This security flaw occurs in the QDnsLookup function, which has a buffer over-read via a crafted reply from a DNS server...

5.3CVSS7.5AI score0.00805EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/11/07 8:48 a.m.7 views

dnsmasq: default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232

A flaw was found in Dnsmasq. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020...

7.5CVSS5.7AI score0.01345EPSS
SaveExploits0References5
Fedora
Fedora
added 2023/11/03 6:51 p.m.54 views

[SECURITY] Fedora 39 Update: bind-9.18.19-1.fc39

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

7.5CVSS7.2AI score0.02647EPSS
SaveExploits0
OSV
OSV
added 2023/10/30 5:15 p.m.5 views

CVE-2023-21311

In Settings, there is a possible way to control private DNS settings from a secondary user due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00084EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2023/10/27 12:56 a.m.4 views

SUSE CVE-2023-38469

A vulnerability was found in Avahi, where a reachable assertion exists in avahidnspacketappendrecord...

6.2CVSS8.5AI score0.00319EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2023/10/25 12:0 a.m.8 views

The vulnerability of the BIG-IP Access Policy Manager, as well as software solutions such as BIG-IP Advanced Firewall Manager, BIG-IP Advanced Web Application Firewall, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Application Visibility and Reporting (AVR), BIG-IP DDos Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Global Traffic Manager, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Inforcement Manager, BIG-IP SSL Orchestrator, BIG-IP Webaccelerator, and BIG-IP WebSafe, is related to incorrect session duration settings. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of the BIG-IP Access Policy Manager, as well as of software solutions such as BIG-IP Advanced Firewall Manager, BIG-IP Advanced Web Application Firewall, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Application Visibili...

8.1CVSS7.5AI score0.00457EPSS
SaveExploits0References4Affected Software18
BDU FSTEC
BDU FSTEC
added 2023/10/25 12:0 a.m.12 views

The vulnerabilities of the BIG-IP Access Policy Manager, as well as the associated software solutions such as BIG-IP Advanced Firewall Manager, BIG-IP Advanced Web Application Firewall, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Application Visibility and Reporting (AVR), BIG-IP Camer-Grade NAT (CGNAT), BIG-IP DDos Hybrid Defender, BIG-IP Domain Name System, BIG-IP Edge Gateway, BIG-IP Fraud Protection Service, BIG-IP Global Traffic Manager, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Inforcement Manager, BIG-IP SSL Orchestrator, BIG-IP Webaccelerator, and BIG-IP WebSafe, are related to memory leak-related errors, allowing attackers to trigger service interruptions.

The vulnerabilities of the BIG-IP Access Policy Manager, as well as of software solutions such as BIG-IP Advanced Firewall Manager, BIG-IP Advanced Web Application Firewall, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Application Visibili...

7.8CVSS7.3AI score0.00538EPSS
SaveExploits0References3Affected Software20
Rows per page
Query Builder