PT-2022-22110 · Totd · Totd

Name of the Vulnerable Software and Affected Versions: totd version 1.5.3 Description: The issue allows DNS cache poisoning due to the use of a fixed UDP source port in upstream queries sent to DNS resolvers, resulting in insufficient entropy to prevent traffic injection attacks. Recommendations:...

totd 安全特征问题漏洞

totd is a small DNS proxy nameserver from the individual developer F.W. Dillema. A security signature issue vulnerability exists in totd version 1.5.3, which stems from the use of a fixed UDP source port in upstream queries sent to the DNS resolver, which would allow DNS cache poisoning...

F5 BIG-IP 代码问题漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial-of-service vulnerability exists in the F5 BIG-IP DNS TMUI, which can be exploited by an authenticated attacker with ...

The vulnerability of the DNS Server component of the Windows operating system, which allows a hacker to execute arbitrary code.

The vulnerability of the DNS Server component of the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the BusyBox command-line utility’s set of tools is related to errors in checking input records of PTR DNS, which are displayed by the netstat utility. This vulnerability allows a hacker to execute arbitrary shell commands on the target system.

The vulnerability of the BusyBox command-line utility is related to errors in checking input records of PTR DNS, which are displayed by the netstat utility, if it is executed on a terminal compatible with VT. Exploiting this vulnerability allows an attacker to execute arbitrary shell commands on...

Node.js 操作系统命令注入漏洞

Node.js is an open source, cross-platform JavaScript runtime environment. Node.js suffers from an operating system command injection vulnerability that stems from the inability of IsIPAddress to properly check for an invalid IP address. When an invalid IPv4 address is supplied, the browser will...

CVE-2022-25876

The package link-preview-js before 2.1.16 are vulnerable to Server-side Request Forgery SSRF which allows attackers to send arbitrary requests to the local network and read the response. This is due to flawed DNS rebinding protection...

Link Preview JS 代码问题漏洞

Link Preview JS is a tool for extracting web link information. A security vulnerability exists in Link Preview JS prior to version 2.1.16, which stems from flawed DNS rebinding protection...

The vulnerability of the Dnsmasq DNS server lies in its improperly implemented security checks for standard elements, allowing attackers to execute a DNS cache poisoning attack.

The vulnerability of the Dnsmasq DNS server is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to execute a DNS cache poisoning attack remotely...

totd 安全特征问题漏洞

totd is a small DNS proxy nameserver by the individual developer F.W. Dillema. A security vulnerability exists in versions of totd prior to 1.5.3, which stems from the application's inability to randomize message IDs...

CVE-2022-32983

Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters...

UBUNTU-CVE-2022-32983

Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters...

Knot Resolver 安全漏洞

Knot Resolver is a caching DNS resolver implementation that includes a resolver library and daemon. A security vulnerability exists in Knot Resolver versions prior to 5.5.1, which stems from a possible DNS cache poisoning when attempting to limit forwarding operations via a filter...

The vulnerability of the DNS Server component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the DNS Server component of the Windows operating system is related to deficiencies in access control for ports. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that is protected by security measures...

The vulnerability of the DNS server of the Microsoft Windows operating system, allowing a hacker to execute arbitrary code.

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

envoy: Segfault in GrpcHealthCheckerImpl

A flaw was found in Envoy. This flaw allows an attacker who controls an upstream host and also controls service discovery of that host via DNS, the EDS API, etc. to crash Envoy by forcing the removal of the host from service discovery and then failing the gRPC health check request. This issue...

The vulnerability of the DNS server of the Microsoft Windows operating system, allowing a hacker to execute arbitrary code.

The vulnerability of the DNS server of the Microsoft Windows operating system is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the DNS Server component of the Windows operating system, related to synchronization errors when using a shared resource (“Race Situation”), allows a perpetrator to execute arbitrary code.

The vulnerability of the DNS Server component of the Windows operating system is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

uClibc-ng through 1.0.40 and uClibc through 0.9.33.2 use predictable DNS transaction IDs that may lead to DNS cache poisoning. This is related to a reset of a value to 0x2.

...

GHSA-3F2C-JM6V-CR35 Django DNS Rebinding Vulnerability

Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWEDHOSTS...