3207 matches found
PT-2023-23180
Name of the Vulnerable Software and Affected Versions c-ares versions prior to 1.19.1 Description The issue arises when /dev/urandom or RtlGenRandom are unavailable, and c-ares uses rand to generate random numbers for DNS query ids. This approach is not a Cryptographically Secure PseudoRandom...
CVE-2023-31442
In Lightbend Akka before 2.8.1, the async-dns resolver used by Discovery in DNS mode and transitively by Cluster Bootstrap uses predictable DNS transaction IDs when resolving DNS records, making DNS resolution subject to poisoning by an attacker. If the application performing discovery does not...
PT-2023-23330 · Lightbend · Akka Discovery +1
Name of the Vulnerable Software and Affected Versions: Lightbend Akka versions 2.5.14 through 2.8.0 Akka Discovery versions 2.5.14 through 2.8.0 Description: The async-dns resolver in Lightbend Akka uses predictable DNS transaction IDs when resolving DNS records, making DNS resolution subject to...
UBUNTU-CVE-2023-31137
MaraDNS is open-source software that implements the Domain Name System DNS. In version 3.5.0024 and prior, a remotely exploitable integer underflow vulnerability in the DNS packet decompression function allows an attacker to cause a Denial of Service by triggering an abnormal program termination...
bind: processing large delegations may severely degrade resolver performance
A flaw was found in bind. When flooding the target resolver with special queries, an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service...
MaraDNS 数字错误漏洞
MaraDNS is an open source implementation of the Domain Name System by the individual developer Sam Trenholme that can be used as a caching, recursive or authoritative name server. A numeric error vulnerability exists in MaraDNS 3.5.0024 and earlier versions, which stems from a remotely exploitabl...
PT-2023-7445 · Canon · I-Sensys Mf640C Series +10
Name of the Vulnerable Software and Affected Versions: Canon imageCLASS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware versions prior to Ver.11.05 Canon imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware versions prior to...
CVE-2023-28742
When DNS is provisioned, an authenticated remote command execution vulnerability exists in DNS iQuery mesh. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
New Decoy Dog Malware Toolkit Uncovered: Targeting Enterprise Networks
An analysis of over 70 billion DNS records has led to the discovery of a new sophisticated malware toolkit dubbed Decoy Dog targeting enterprise networks. Decoy Dog , as the name implies, is evasive and employs techniques like strategic domain aging and DNS query dribbling, wherein a series of...
SmartDNS 缓冲区错误漏洞
SmartDNS is a DNS server running locally by Nick Peng Personal Developer. A security vulnerability exists in SmartDNS version v41 and prior versions, which stems from the presence of a stack-based buffer overflow that allows out-of-bounds writes via specially crafted DNS requests...
The vulnerability of the DNS server Dnsmasq involves unlimited resource allocation, which allows attackers to cause service failures.
The vulnerability of the Dnsmasq DNS server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the DNS service in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Windows operating system’s DNS service is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted input data...
The vulnerability of the Windows operating system’s DNS server allows a hacker to execute arbitrary code.
The vulnerability of the Windows operating system’s DNS server arises from a “race condition”. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the DNS Server component of the Windows operating system, which allows a hacker to disclose protected information
The vulnerability of the DNS Server component of the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that should be protected...
The vulnerability of the Windows operating system’s DNS server allows a hacker to execute arbitrary code.
The vulnerability of the Windows operating system’s DNS server arises from a “race condition”. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
USN-6034-1 dnsmasq vulnerability
It was discovered that Dnsmasq was sending large DNS messages over UDP, possibly causing transmission failures due to IP fragmentation. This update lowers the default maximum size of DNS messages to improve transmission reliability over UDP...
The vulnerability of the DNS BIND server, related to the lack of use of the assert() function, allows a hacker to trigger a service failure.
The vulnerability of the BIND DNS server relates to the processing of the Write Directive DS. BIND waits for this processing to complete, or until the timeout interval expires. As a result, the resumedslookup function is called, but it does not check whether the previous selection has been...
The vulnerability of the DNS server of the Microsoft Windows operating system, allowing a hacker to execute arbitrary code.
The vulnerability of the DNS server of the Microsoft Windows operating system arises from a “race condition”. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the BIND DNS server arises from improper validation of assertions, which leads to incomplete cleanup. This allows attackers to perform a denial-of-service attack.
The vulnerability of the BIND DNS server relates to the possibility of exploiting certain vulnerabilities during DNS query processing. Exploiting this vulnerability allows a malicious actor to send repetitive request patterns to servers with enabled DNSSEC-Vvalidated Cache synth-from-dnssec,...
