2934 matches found
PT-2017-17179 · Cisco · Cisco Asa
Name of the Vulnerable Software and Affected Versions: Cisco ASA Software versions prior to 9.17.12 Cisco ASA Software versions prior to 9.24.18 Cisco ASA Software versions prior to 9.43.12 Cisco ASA Software versions prior to 9.53.2 Cisco ASA Software versions prior to 9.62.2 Description: A flaw...
USN-3259-1 bind9 vulnerabilities
It was discovered that the resolver in Bind made incorrect assumptions about ordering when processing responses containing a CNAME or DNAME. An attacker could use this cause a denial of service. CVE-2017-3137 Oleg Gorokhov discovered that in some situations, Bind did not properly handle DNS64...
UBUNTU-CVE-2017-3136
A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were...
Multiple Huawei Server Buffer Overflow Vulnerabilities
Huawei Tecal RH1288 V2 and others are servers from Huawei, a Chinese company. A buffer overflow vulnerability exists in a number of Huawei servers, which stems from the program failing to adequately detect the length of copied data when processing DNS server messages. An attacker could exploit th...
UBUNTU-CVE-2016-10152
The readconfigfile function in lib/hesiod.c in Hesiod 3.2.1 falls back to the ".athena.mit.edu" default domain when opening the configuration file fails, which allows remote attackers to gain root privileges by poisoning the DNS cache...
DEBIAN-CVE-2016-10152
The readconfigfile function in lib/hesiod.c in Hesiod 3.2.1 falls back to the ".athena.mit.edu" default domain when opening the configuration file fails, which allows remote attackers to gain root privileges by poisoning the DNS cache...
Microsoft Windows Information Disclosure Vulnerability (CNVD-2017-03748)
Microsoft Windows is a series of operating systems released by Microsoft Corporation.DNS Query is one of the DNS query components. An information disclosure vulnerability exists in DNS Query in Microsoft Windows. A remote attacker can exploit this vulnerability to obtain sensitive information by...
CVE-2017-0057
DNS client in Microsoft Windows 8.1; Windows Server 2012 R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 fails to properly process DNS queries, which allows remote attackers to obtain sensitive information via 1 convincing a workstation user to visit an untrusted...
D-Link DSL-2640B DNS Authentication Bypass Vulnerability
The D-Link DSL-2640B is a router device. An authentication bypass vulnerability exists in the D-Link DSL-2640B DNS, which exists in the web interface and can be exploited by an attacker to bypass authentication for unauthorized access...
CVE-2017-6405
An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Hostname-based security is open to DNS spoofing...
D-Link DSL-2730U Cross-Site Request Forgery Vulnerability
The D-link DI-604 is a small router device. The D-Link DSL-2730U C1 IN1.00 device has a cross-site request forgery vulnerability in its implementation that could allow a remote attacker to change the DNS or firewall configuration or arbitrary passwords...
USN-3201-1 bind9 vulnerabilities
It was discovered that Bind incorrectly handled rewriting certain query responses when using both DNS64 and RPZ. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service...
bind: Assertion failure when using DNS64 and RPZ Can Lead to Crash
A denial of service flaw was found in the way BIND handled query responses when both DNS64 and RPZ were used. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure or a null pointer dereference via a specially crafted DNS response...
ISC BIND 9 DNS64 and RPZ Assertion Failure Denial of Service Vulnerability
ISC BIND is the United States Internet Systems Consortium ISC company maintains a set of open source software that implements the DNS protocol. ISC BIND 9 suffers from a DNS64 and RPZ Assertion Failure Denial of Service vulnerability. An attacker can exploit the vulnerability by rewriting the que...
Google Android Bionic DNS Denial of Service Vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.DNS resolution is performed by C library functions. A denial of service vulnerability exists in Google Android Bionic DNS. A remote attacker could use this vulnerability to cause t...
Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to DNS rebinding
Overview AppGoat provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN IPA is a hands-on vulnerability learning tool. Hands-on Vulnerability Learning Tool "AppGoat" for Web Application contains a DNS rebinding vulnerability. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinate...
UBUNTU-CVE-2017-3135
Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 - 9.9.9-S7, 9.9.3 - 9.9.9-P5, 9.9.10b1,...
DEBIAN-CVE-2016-7993
A bug in util-print.c:reltsprint in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM...