bind: assertion failure in buffer.c while building responses to a specifically constructed request

A denial of service flaw was found in the way BIND constructed a response to a query that met certain criteria. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS request packet...

Apple OS X mDNSResponder Information Disclosure Vulnerability

Apple OS X is a suite of specialized operating systems developed by Apple for Mac computers. mDNSResponder is a component that provides unicast and multicast mDNS service. An information disclosure vulnerability exists in mDNSResponder in versions of Apple OS X prior to 10.12, which can be...

USN-3088-1 bind9 vulnerability

It was discovered that Bind incorrectly handled building responses to certain specially crafted requests. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service...

CVE-2016-4739

mDNSResponder in Apple OS X before 10.12, when VMnet.framework is used, arranges for a DNS proxy to listen on all interfaces, which allows remote attackers to obtain sensitive information by sending a DNS query to an unintended interface...

UBUNTU-CVE-2016-4760

WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to conduct DNS rebinding attacks against non-HTTP Safari sessions by leveraging HTTP/0.9 support...

Arbitrary Command Execution Vulnerability in Intelligent DNS System of Zhengzhou Glacier Network Technology Co.

Zhengzhou Glacier Networks Technology Co., Ltd Glacier Networks is a provider of embedded software product development and network application layer management equipment. An arbitrary command execution vulnerability exists in the Intelligent DNS system of Zhengzhou Glacier Network Technology Co. ...

MiniUPnP DNS Rebind Vulnerability

The remote host is running a version of MiniUPnP that is affected by an unspecified flaw that exists in the Domain Name System DNS related to the 'rebinding' interaction. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a specially crafted web page, to run a...

Tmdocs dns_dhcp SQL Injection Vulnerability

Tmdocs dnsdhcp is a web interface that allows management of DNSmasq a tool for configuring DNS and DHCP and static DHCP leases in Mikrotik routers. A SQL injection vulnerability exists in Tmdocs dnsdhcp. An attacker could use this vulnerability to take control of an application, access or modify...

ISC BIND Denial of Service Vulnerability (CNVD-2016-05171)

ISC BIND is the United States Internet Systems Consortium ISC company maintains a set of open source software that implements the DNS protocol. A security vulnerability exists in ISC BIND. When the program is enabled with the lwresd or named lwres option, a remote attacker can cause a denial of...

nginx: use-after-free during CNAME response processing in resolver

A use-after-free flaw was found in the way nginx resolved certain CNAME DNS records. An attacker able to manipulate DNS responses received by nginx could use this flaw to cause a worker process to crash or, possibly, execute arbitrary code if nginx enabled the resolver in its configuration...

nginx: invalid pointer dereference in resolver

It was discovered that nginx could perform an out of bound read and dereference an invalid pointer when resolving CNAME DNS records. An attacker able to manipulate DNS responses received by nginx could use this flaw to cause a worker process to crash if nginx enabled the resolver in its...

ISC BIND Denial of Service Vulnerability (CNVD-2016-04609)

ISC BIND is the United States Internet Systems Consortium ISC company maintains a set of open source software that implements the DNS protocol. A denial of service vulnerability exists in ISC BIND version 9.10.4-P1. A remote attacker could use this vulnerability to cause a denial of service...

The vulnerability of the Firefox browser, which allows a remote attacker to bypass security restrictions

The vulnerability of Firefox lies in the ability to install extensions for lightweight themes without using an HTTPS connection. Exploiting this vulnerability allows a malicious individual to bypass user authentication by using a specially crafted website and by replacing the DNS request for...

Vulnerability of PHP software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information

Overloading of buffers in dynamic memory in the phpparserr function in ext/standard/dns.c in PHP allows remote servers to trigger a failure in service abrupt termination of operations and execute arbitrary code, using specially crafted TXT records in DNS. This vulnerability is related to the...

The vulnerability of Samba software allows a remote attacker to compromise the accessibility of protected information.

The vulnerability exists in the internal Samba DNS server due to the lack of checking the QR field in the header of the incoming DNS request before sending the response. Exploiting this vulnerability allows malicious actors to cause service failures excessive CPU usage and reduced bandwidth...

Vulnerability of PHP software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information

Multiple buffer overflows in the phpparserr function in ext/standard/dns.c in PHP allow removed DNS servers to trigger a failure in service abrupt termination of an application or execute arbitrary code using specially crafted DNS records. This vulnerability is related to the functions dnsgetreco...

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a “disconnection”

Cisco IOS software contains a vulnerability in the intrusion detection service, which allows a malicious attacker to induce a “service failure” by manipulating DNS packets...

The vulnerability of the Cisco IOS operating system, which allows a remote attacker to trigger a service failure

A bug in the Application Layer Gateway ALG module of the Cisco IOS operating system allows a remote attacker to reboot the device by using a specially crafted DNS packet with NAT enabled...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the DNS Server component of the Windows operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted requests...

Apple AirPort Base Station Memory Corruption Vulnerability

The Apple AirPort Base Station is a Wi-Fi base station product from Apple USA. The product supports streaming music and wireless printing, among other things. A memory corruption vulnerability exists in Apple AirPort Base Station versions prior to 7.6.7 and prior to 7.7.7, which stems from the...