RLSA-2021:4384 Moderate: bind security and bug fix update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

PT-2021-19563 · Unknown · Capital Embedded Ar Classic R20-11 +1

Name of the Vulnerable Software and Affected Versions: Capital Embedded AR Classic 431-422 versions all Capital Embedded AR Classic R20-11 versions all prior to V2303 Description: A vulnerability has been identified where the DHCP client application does not validate the length of the Domain Name...

多款Qualcomm产品缓冲区错误漏洞

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.MDM9607 is a central processing unit CPU product.MDM9640 is a central processing unit CPU product. A buffer error vulnerability exists in various Qualcomm components, which stems fro...

CVE-2021-33259

Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query history...

PT-2021-4603

Name of the Vulnerable Software and Affected Versions D-Link DIR-868LW version 1.12b Description The issue is related to weaknesses in the authentication procedure of the D-Link DIR-868LW router's web interface. This allows a remote attacker to obtain users' DNS query history due to the lack of...

OESA-2021-1402 golang security update

The go programming language Security Fixes: Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection e.g., XSS that does not conform to the RFC1035 format.CVE-2021-33195 In...

pentest-wiki

This repository is an information gathering library for penetration testers and researchers, providing a collection of tools and documentation for gathering information about a target organization. The library includes tools for DNS enumeration, whois searches, and Linux system architecture and...

The vulnerability of the DNS Server component of the Windows operating system, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the DNS Server component of the Windows operating system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft DNS Server 代码注入漏洞

Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft DNS Server. The following products and versions are affected:Windows Server 2016,Windows Server 2016 Server Core installation,Windows Server 2008 for 32-bit Systems Service Pack...

UBUNTU-CVE-2021-39894

In all versions of GitLab CE/EE since version 8.0, a DNS rebinding vulnerability exists in Fogbugz importer which may be used by attackers to exploit Server Side Request Forgery attacks...

PT-2023-3600 · Qt Company +8 · Qt +8

Name of the Vulnerable Software and Affected Versions: Qt versions 5.x before 5.15.14 Qt versions 6.x before 6.2.9 Qt versions 6.3.x through 6.5.x before 6.5.1 Description: The issue is related to a buffer over-read in the QDnsLookup component of the Qt framework, which can be exploited by a remo...

The vulnerability of the dnsmgmt.msc component of the Windows operating system, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the dnsmgmt.msc component of the Windows operating system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the DNS Server component of the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the DNS Server component of the Windows operating system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the DNS Server component of the Windows operating system, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the DNS Server component of the Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

c-ares: Missing input validation of host names may lead to domain hijacking

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS Domain Name Servers can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as we...

c-ares: Missing input validation of host names may lead to domain hijacking

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS Domain Name Servers can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as we...

nodejs: Improper handling of untypical characters in domain names

A flaw was found in Node.js. These vulnerabilities include remote code execution, Cross-site scripting XSS, application crashes due to missing input validation of hostnames returned by Domain Name Servers in the Node.js DNS library, which can lead to the output of wrong hostnames leading to Domai...

libuv: out-of-bounds read in uv__idna_toascii() can lead to information disclosures or crashes

A flaw has been found in libuv. Node.js is vulnerable to out-of-bounds read in libuv's uvidnatoascii function which is used to convert strings to ASCII which is called by Node's DNS module's lookup function and can lead to information disclosures or crashes. The highest threat from this...

nodejs: Improper handling of untypical characters in domain names

A flaw was found in Node.js. These vulnerabilities include remote code execution, Cross-site scripting XSS, application crashes due to missing input validation of hostnames returned by Domain Name Servers in the Node.js DNS library, which can lead to the output of wrong hostnames leading to Domai...

c-ares: Missing input validation of host names may lead to domain hijacking

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS Domain Name Servers can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as we...