2966 matches found
Qualcomm 芯片代码问题漏洞
A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and are often manufactured on the surface of semiconductor wafers. A security vulnerability exists in the Qualcomm Chip modem module that...
Qualcomm 芯片缓冲区错误漏洞
A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and is often fabricated on the surface of semiconductor wafers. A security vulnerability exists in the Qualcomm Chip modem module, which stems...
CVE-2023-21422
Improper authorization vulnerability in semAddPublicDnsAddr in WifiSevice prior to SMR Jan-2023 Release 1 allows attackers to set custom DNS server without permission via binding WifiService...
PT-2023-12809 · Modem · Modem
Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure in the modem due to a buffer over-read in the DNS client. This occurs because of a missing length check, which allows for unauthorized access to...
PT-2023-12805 · Modem · Modem
Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure in the modem due to a buffer over-read while processing a response from a DNS server. Recommendations: At the moment, there is no information...
PT-2023-19950 · Helm +2 · Helm +2
Name of the Vulnerable Software and Affected Versions: Helm versions prior to 3.11.1 Description: The getHostByName template function in Helm, introduced in Helm v3, performs a DNS lookup to return an IP address for a given hostname. This function can disclose information passed into the chart to...
Helm 信息泄露漏洞
Helm is a Kubernetes package manager. An information disclosure vulnerability exists in versions of Helm prior to 3.11.1, which stems from the fact that information passed to the charts may be disclosed to the DNS servers used to look up IP addresses...
The vulnerability of the mDNSResponder.exe executable software used for configuring and managing Dante-enabled Zoom Rooms allows a attacker to load arbitrary files.
The vulnerability of software for configuring and managing Dante-enabled Zoom Rooms relates to incorrect handling of the search path. Exploiting this vulnerability could allow a malicious actor to upload arbitrary files remotely...
[SECURITY] Fedora 36 Update: bind-9.16.37-1.fc36
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...
An UPDATE message flood may cause named to exhaust all available memory
...
PT-2023-7389 · F5 · Big-Ip
Name of the Vulnerable Software and Affected Versions: BIG-IP versions 13.1.x BIG-IP versions 14.1.x before 14.1.5.3 BIG-IP versions 15.1.x before 15.1.8.1 BIG-IP versions 16.1.x before 16.1.3.3 BIG-IP versions 17.0.x before 17.0.0.2 Description: The issue is related to the Traffic Management...
F5 BIG-IP 代码问题漏洞
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP DNS profile, where the Rapid Response Mode RRM setting is turned on...
USN-5825-1 pam vulnerability
It was discovered that PAM did not correctly restrict login from an IP address that is not resolvable via DNS. An attacker could possibly use this issue to bypass authentication...
ISC BIND 安全漏洞
ISC BIND is a suite of open source software that implements the DNS protocol from the American company ISC. A security vulnerability exists in BIND versions 9.16.0 through 9.16.36, 9.18.0 through 9.18.10, and 9.19.0 through 9.19.8, which arises from the fact that when stale caching and stale...
ISC BIND 安全漏洞
ISC BIND is a suite of open source software that implements the DNS protocol from the US company ISC. A security vulnerability exists in BIND versions 9.11.4-S1 through 9.11.37-S1, and 9.16.8-S1 through 9.16.36-S1, which stems from processing duplicate responses to the same query, where both...
ISC BIND 安全漏洞
ISC BIND is a suite of open source software that implements the DNS protocol from the American company ISC. A security vulnerability exists in BIND versions 9.16.0 through 9.16.36, 9.18.0 through 9.18.10, and 9.19.0 through 9.19.8, which stems from the fact that if the resolver receives a lot of...
bind: processing large delegations may severely degrade resolver performance
A flaw was found in bind. When flooding the target resolver with special queries, an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service...
bind: DNS forwarders - cache poisoning vulnerability
A cache poisoning vulnerability was found in BIND when using forwarders. Bogus NS records supplied by the forwarders may be cached and used by name if it needs to recurse for any reason. This issue causes it to obtain and pass on potentially incorrect answers. This flaw allows a remote high...
nodejs: DNS rebinding in inspect via invalid octal IP address
A flaw was found in NodeJS. The issue occurs in the Node.js rebinding protector for --inspect that still allows invalid IP addresses, specifically, the octal format. This flaw allows an attacker to perform DNS rebinding and execute arbitrary code...
The vulnerability of the Application Layer DNS Gateway Function (ALG) in Cisco IOS XE allows a attacker to trigger a device reboot or cause a service failure.
The vulnerability of the Application Layer DNS Gateway Function ALG of Cisco IOS XE lies in insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause service failure through a specially crafted DNS packet...