PowerDNS Authoritative Server Module Authentication Bypass Vulnerability (CNVD-2017-38247)

PowerDNS Authoritative Server provides DNS-related products and services. PowerDNS Authoritative Server has an authentication bypass vulnerability in DNSSEC signature verification that could allow a man-in-the-middle attacker to forge signatures and bypass security restrictions...

DNS Cache Poisoning Attack Vulnerability in NIPPON TELEGRAPH AND TELEPHONE EAST PWR-Q200

NIPPON TELEGRAPH AND TELEPHONE EAST PWR-Q200 is a removable wireless router from NIPPON TELEGRAPH AND TELEPHONE EAST, Japan. A DNS cache poisoning attack vulnerability exists in the NIPPON TELEGRAPH AND TELEPHONE EAST PWR-Q200, which originates from the program's failure to use a random value for...

The vulnerability of the DNSAPI.dll library in the Windows operating system’s DNS service allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the DNSAPI.dll library in the Windows operating system’s DNS service is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted DNS responses, or to cause a service failure...

PWR-Q200 vulnerable to DNS cache poisoning attacks

Overview PWR-Q200 provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION is a mobile WiFi router. PWR-Q200 is vulnerable to DNS cache poisoning attacks as DNS queries are done with a fixed source port CWE-330. Toshifumi Sakaguchi reported this vulnerability to IPA. JPCERT/CC coordinated with...

BSA-2017-449

Security Advisory ID : BSA-2017-449 Component : dnsmasq Revision : 2.0: Final A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code...

DEBIAN-CVE-2017-2909

An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over the network to trigger this vulnerability...

The vulnerability of the DNS server Dnsmasq, caused by overflow in the dynamic memory buffer, allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the DNS server Dnsmasq arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service failures or execute arbitrary code using a specially crafted IPv6 request...

The vulnerability of the DNS server Dnsmasq, related to buffer overflows, allows attackers to cause a service failure or execute arbitrary code.

The vulnerability of the Dnsmasq DNS server arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to cause a service failure or execute arbitrary code by sending specially crafted DNS packets...

The vulnerability of the add_pseudoheader function in the Dnsmasq DNS server allows a hacker to cause a service failure.

The vulnerability of the addpseudoheader function in the Dnsmasq DNS server arises from the loss of a significant number of bits in cases where parameters addmac, addcpeid, or addsubnet are specified. Exploiting this vulnerability allows a malicious actor to cause a service failure through a...

Cesanta Mongoose Denial of Service Vulnerability

Cesanta Mongoose is a suite of embedded servers from Cesanta, Ireland. A denial of service vulnerability exists in the DNS server functionality in Cesanta Mongoose version 6.8. An attacker can cause a denial of service via a specially crafted DNS request that results in high CPU utilization...

Systemd Denial of Service Vulnerability

systemd is a system and service manager for the Linux operating system. A denial of service vulnerability exists in systemd 223-235. The vulnerability arises because a remote DNS server can respond with a customized DNS NSEC resource record, which triggers an infinite loop in the...

ALPINE-CVE-2017-15650

musl libc before 1.1.17 has a buffer overflow via crafted DNS replies because dnsparsecallback in network/lookupname.c does not restrict the number of addresses, and thus an attacker can provide an unexpected number by sending A records in a reply to an AAAA query...

UBUNTU-CVE-2017-15650

musl libc before 1.1.17 has a buffer overflow via crafted DNS replies because dnsparsecallback in network/lookupname.c does not restrict the number of addresses, and thus an attacker can provide an unexpected number by sending A records in a reply to an AAAA query...

DEBIAN-CVE-2017-15650

musl libc before 1.1.17 has a buffer overflow via crafted DNS replies because dnsparsecallback in network/lookupname.c does not restrict the number of addresses, and thus an attacker can provide an unexpected number by sending A records in a reply to an AAAA query...

PT-2017-4088 · Musl +2 · Musl Libc +2

Name of the Vulnerable Software and Affected Versions: musl libc versions prior to 1.1.17 Description: The issue is related to a buffer overflow in the dns parse callback function in network/lookup name.c, which does not restrict the number of addresses. This allows an attacker to provide an...

CVE-2017-11779

The Microsoft Windows Domain Name System DNS DNSAPI.dll on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses, aka "Windows DNSAPI...

CVE-2017-11771

The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properl...

Debian Arbitrary Code Execution Vulnerability

Debian is a free operating system created by the Debian Project Collaboration with Linux or FreeBSD as its kernel. An arbitrary code execution vulnerability exists in Debian versions prior to 2.0.7 in inspircd, which stems from the program failing to properly handle unsigned integers. A remote...

DNSmasq Denial of Service Vulnerability (CNVD-2017-29274)

DNSmasq is a small and handy tool for configuring DNS and DHCP for small networks that provides DNS functionality and optional DHCP functionality. A denial of service vulnerability in DNSmasq 2.77 and prior versions allows remote attackers to consume excessive memory on the target system by sendi...

dnsmasq: memory exhaustion vulnerability in the EDNS0 code

A memory exhaustion flaw was found in dnsmasq in the EDNS0 code. An attacker could send crafted DNS packets which would trigger memory allocations which would never be freed, leading to unbounded memory consumption and eventually a crash. This issue only affected configurations using one of the...