dnsmasq: heap overflow in the code responsible for building DNS replies

A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code...

dnsmasq: heap overflow in the code responsible for building DNS replies

A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code...

dnsmasq: heap overflow in the code responsible for building DNS replies

A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code...

dnsmasq: heap overflow in the code responsible for building DNS replies

A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code...

UBUNTU-CVE-2017-14496

Integer underflow in the addpseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request...

PT-2017-1001 · Simon Kelley +5 · Dnsmasq +5

Name of the Vulnerable Software and Affected Versions: dnsmasq versions prior to 2.78 Description: The issue is a heap-based buffer overflow that can be triggered by a crafted DNS response, allowing remote attackers to cause a denial of service or execute arbitrary code. This can occur due to a...

The vulnerability of the DNS proxy server of the PAN-OS operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the DNS proxy server of the PAN-OS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created domain name FQDN...

DEBIAN-CVE-2017-14339

The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it to enter an infinite loop. This can cause high CPU usage and makes the server unresponsive...

DEBIAN-CVE-2017-12995

The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:nsprint...

D-Link DIR-850L REV. A DNS Change Vulnerability

The D-Link DIR-850L REV.A is a wireless router from AUO D-Link. A security vulnerability exists in the htdocs/parentalcontrols/bind.php file on D-Link DIR-850L REV.A devices using firmware FW114WWb07h2abbeta1 and earlier. A remote attacker could exploit the vulnerability to change the DNS...

CVE-2017-14423

htdocs/parentalcontrols/bind.php on D-Link DIR-850L REV. A with firmware through FW114WWb07h2abbeta1 devices does not prevent unauthenticated nonce-guessing attacks, which makes it easier for remote attackers to change the DNS configuration via a series of requests...

UBUNTU-CVE-2017-12995

The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:nsprint...

GNU C Library DNS Spoofing Vulnerability

The GNU C Library a.k.a. glibc, libc6 is an open-source, free C language compiler released under the LGPL license. A security vulnerability exists in the DNS stub resolver in the GNU C Library. An attacker can exploit this vulnerability to perform a DNS spoofing attack...

Intel ConnMan Project connection manager daemon buffer overflow vulnerability

Intel ConnMan Project connection manager daemon is an Internet connection manager from Intel Corporation USA for managing Internet connections in embedded devices. A buffer overflow vulnerability exists in Intel ConnMan Project connection manager daemon version 1.34 and earlier. A remote attacker...

BSA-2017-370

Security Advisory ID : BSA-2017-370 Component : Systemd Revision : 2.0: Interim In systemd through 233, certain sizes passed to dnspacketnew in systemd-resolved can cause it to allocate a buffer that's too small. A malicious DNS server can exploit this via a response with a specially crafted TCP...

DNSSEC Key Signing Key Rollover

On October 11, 2017, the Internet Corporation for Assigned Names and Numbers ICANN will be changing the Root Zone Key Signing Key KSK used in the domain name system DNS Security Extensions DNSSEC protocol. DNSSEC is a set of DNS protocol extensions used to digitally sign DNS information, which is...

Technicolor TC7337 Stored Cross-Site Scripting Vulnerability

Technicolor TC7337 routers is a wireless router from Technicolor France. A cross-site scripting vulnerability exists in the Technicolor TC7337 router version 08.89.17.20.00. A remote attacker can exploit this vulnerability to cause DNS pollution and steal router credentials...

Moderate: Red Hat Bug Fix Advisory: bind bug fix update

An update for bind is now available for Red Hat Enterprise Linux 7. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for...

Knot DNS TSIG Authentication Bypass Vulnerability

Knot DNS is a high-performance DNS server developed by the Czech Network Information Center CZ.NIC that supports all the key features of the DNS system, such as zone switching, dynamic updates and DNS Security Extensions DNSSEC. A security vulnerability exists in Knot DNS. An attacker could explo...

DEBIAN-CVE-2017-1000381

The c-ares function aresparsenaptrreply, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way...