2960 matches found
golang: net: lookup functions may return invalid host names
A flaw was found in Go. The LookupCNAME, LookupSRV, LookupMX, LookupNS, and LookupAddr functions in the net package and methods on the Resolver type, may return arbitrary values retrieved from DNS, allowing injection of unexpected contents. The highest threat from this vulnerability is to integri...
golang: net: lookup functions may return invalid host names
A flaw was found in Go. The LookupCNAME, LookupSRV, LookupMX, LookupNS, and LookupAddr functions in the net package and methods on the Resolver type, may return arbitrary values retrieved from DNS, allowing injection of unexpected contents. The highest threat from this vulnerability is to integri...
USN-5034-1 c-ares vulnerability
Philipp Jeitner and Haya Shulman discovered that c-ares incorrectly validated certain hostnames returned by DNS servers. A remote attacker could possibly use this issue to perform Domain Hijacking attacks...
UBUNTU-CVE-2021-3672
A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS Domain Name Servers can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as we...
Mozilla Firefox 竞争条件问题漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox suffers from a Competitive Condition Issue vulnerability that originates from a competitive condition when resolving DNS names that could lead to memory corruption...
HCC Embedded InterNiche 缓冲区错误漏洞
HCC Embedded InterNiche is a newsletter software. A security vulnerability exists in HCC Embedded InterNiche that originates from a boundary condition in the DNSv4 component. An attacker can exploit the vulnerability to trigger an out-of-bounds read error and cause a denial of service on the syst...
HCC Embedded InterNiche 安全特征问题漏洞
HCC Embedded InterNiche is a newsletter software. An unspecified vulnerability exists in HCC Embedded InterNiche, which can be exploited to allow an attacker to be able to predict the source port of a DNS query, and then send spoofed DNS response packets that may be accepted as valid answers...
HCC Embedded InterNiche 安全特征问题漏洞
HCC Embedded InterNiche is a newsletter software. A security vulnerability exists in HCC Embedded InterNiche that stems from a DNS client not setting enough random transaction ids in the DNSv4 component.An attacker can exploit this vulnerability to pass specially crafted inputs to the application...
CVE-2021-21565
Dell PowerScale OneFS versions 9.1.0.3 and earlier contain a denial of service vulnerability. SmartConnect had an error condition that may be triggered to loop, using CPU and potentially preventing other SmartConnect DNS responses...
libuv: out-of-bounds read in uv__idna_toascii() can lead to information disclosures or crashes
A flaw has been found in libuv. Node.js is vulnerable to out-of-bounds read in libuv's uvidnatoascii function which is used to convert strings to ASCII which is called by Node's DNS module's lookup function and can lead to information disclosures or crashes. The highest threat from this...
libuv: out-of-bounds read in uv__idna_toascii() can lead to information disclosures or crashes
A flaw has been found in libuv. Node.js is vulnerable to out-of-bounds read in libuv's uvidnatoascii function which is used to convert strings to ASCII which is called by Node's DNS module's lookup function and can lead to information disclosures or crashes. The highest threat from this...
CVE-2021-34442
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2021-34525
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2021-34499
Windows DNS Server Denial of Service Vulnerability...
CVE-2021-33754
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2021-33756
Windows DNS Snap-in Remote Code Execution Vulnerability...
CVE-2021-33780
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2021-33750
Windows DNS Snap-in Remote Code Execution Vulnerability...