The vulnerability of the DNS functions of the CentOS Web Panel application management server, related to the lack of measures for cleaning input data, allows a perpetrator to execute cross-site attacks.

DNS Functionality of the CentOS Web Panel application is vulnerable. Exploiting this vulnerability could allow a malicious actor to execute cross-site scripting attacks from a remote location...

The vulnerability of the managed-keys function in the DNS BIND server allows a attacker to cause a service failure.

The vulnerability of the managed-keys function in the DNS BIND server is related to a key validation error, especially when an unsupported algorithm is used. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the DNS BIND server, related to data processing errors, allows a hacker to cause a service failure.

The vulnerability of the DNS BIND server is related to data processing errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Firefox enables DNS-over-HTTPS by default (with Cloudflare) for all U.S. users

If you use the Firefox web browser, here's an important update that you need to be aware of. Starting today, Mozilla is activating the DNS-over-HTTPS security feature by default for all Firefox users in the U.S. by automatically changing their DNS server configuration in the settings. That means,...

The vulnerability of the DNS processing component on the Samba network communication server allows a attacker to cause a service failure.

The vulnerability of the DNS processing component on the Samba network communication server is related to the handling of the null pointer. Exploiting this vulnerability can allow a malicious actor to cause service failures...

DEBIAN-CVE-2014-3484

Multiple stack-based buffer overflows in the dnexpand function in network/dnexpand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to 1 have unspecified impact via an invalid name length in a DNS response or 2 cause a denial of service crash via an invalid name...

UBUNTU-CVE-2014-3484

Multiple stack-based buffer overflows in the dnexpand function in network/dnexpand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to 1 have unspecified impact via an invalid name length in a DNS response or 2 cause a denial of service crash via an invalid name...

The vulnerability of the DNS BIND server, related to a data transfer management error for dynamic zones, allows attackers to access confidential data.

The vulnerability of the BIND DNS server relates to a data transfer management error when dynamic zones are writable. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

DEBIAN-CVE-2015-2689

Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle pending-connection resolve states during periods of high DNS load, which allows remote attackers to cause a denial of service assertion failure and daemon exit via crafted packets...

UBUNTU-CVE-2015-2689

Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle pending-connection resolve states during periods of high DNS load, which allows remote attackers to cause a denial of service assertion failure and daemon exit via crafted packets...

UBUNTU-CVE-2015-5230

The DNS packet parsing/generation code in PowerDNS aka pdns Authoritative Server 3.4.x before 3.4.6 allows remote attackers to cause a denial of service crash via crafted query packets...

The vulnerability of the DNS resolver, knot resolver, arises due to insufficient validation of input data. This allows attackers to convert a domain protected by DNSSEC into a domain that is no longer protected by DNSSEC.

The vulnerability of the DNS resolver, Knot Resolver, exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to convert a domain protected by DNSSEC into a domain that is no longer protected by DNSSEC...

The vulnerability in the CentOS Web Panel server management application arises from insufficient validation of input data. This allows attackers to gain access to the DNS records associated with the user account.

The vulnerability of the CentOS Web Panel server management application exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the DNS records of the user account...

The vulnerability of the web interface of the microprogramming software for the Technicolor TC7230 allows a attacker to perform a DNS Rebinding attack.

The vulnerability of the web interface of the microprogramming software for the Technicolor TC7230 router is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to carry out a DNS Rebinding attack remotely...

DEBIAN-CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

PT-2019-6141 · Nlnet +8 · Unbound +8

Name of the Vulnerable Software and Affected Versions: Unbound versions prior to 1.9.5 Description: The issue is related to an integer overflow in a size calculation in the dnscrypt/dnscrypt.c component of the Unbound DNS server. This could potentially allow a remote attacker to access confidenti...

ALPINE-CVE-2019-14861

All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the poorly named dnsserver RPC pipe provides administrative facilities to modify DNS records and zones. Samba, when acting as an AD DC, stores DNS records in LDAP. In AD, the default...

The vulnerability of the RouterOS operating system, which arises due to insufficient validation of input data, allows a hacker to cause damage to the integrity of DNS system data.

The vulnerability of the RouterOS operating system exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause damage to the integrity of DNS system data...

[SECURITY] Fedora 31 Update: bind-9.11.13-2.fc31

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Tenda AC9 /goform/WanParameterSetting DNS1 Command Injection Vulnerability

The Tenda AC9 is a wireless router. A security vulnerability in the Tenda AC9 /goform/WanParameterSetting implementation for handling DNS1 POST parameters allows remote attackers to exploit the vulnerability by submitting a special request that can execute arbitrary OS commands...