IBM DataPower Gateways Man-in-the-Middle Attack Vulnerability

IBM DataPower Gateways is a suite of security and integration platforms from IBM USA designed specifically for mobile, cloud, application programming interfaces APIs, web, service-oriented architecture SOA, B2B, and cloud workloads that protects, integrates, and optimizes access across channels...

[SECURITY] Fedora 26 Update: bind-9.11.2-1.P1.fc26

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Unbound Security Bypass Vulnerability

Unbound is a C-based open source recursive DNS server software maintained by NLnet Labs in the Netherlands. A security vulnerability exists in Unbound versions prior to 1.6.8, which stems from the program failing to properly validate wildcard records. An attacker could exploit this vulnerability ...

ALPINE-CVE-2017-15107

A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist...

DEBIAN-CVE-2017-15107

A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-existence of hostnames that actually exist...

Knot Resolver Input Validation Vulnerability

Knot Resolver is a DNS resolver that includes DNS resolver libraries and daemons.DNSSEC validators components is one of the DNS Secure Extended Validation components. An input validation vulnerability exists in the DNSSEC validators component in Knot Resolver versions prior to 1.5.2. An attacker...

DEBIAN-CVE-2018-1000003

Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay...

OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)

It was discovered that the DNS client implementation in the JNDI component of OpenJDK did not use random source ports when sending out DNS queries. This could make it easier for a remote attacker to spoof responses to those queries...

OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)

It was discovered that the DNS client implementation in the JNDI component of OpenJDK did not use random source ports when sending out DNS queries. This could make it easier for a remote attacker to spoof responses to those queries...

tinysvcmdns library DNS Denial of Service Vulnerability

The tinysvcmdns library is a multicast DNS response library for services. A security vulnerability exists in the tinysvcmdns library version 2017-11-05. An attacker can exploit this vulnerability by sending a DNS query to cause a denial of service null pointer backreference and server crash...

OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)

It was discovered that the DNS client implementation in the JNDI component of OpenJDK did not use random source ports when sending out DNS queries. This could make it easier for a remote attacker to spoof responses to those queries...

ISC BIND Remote Denial of Service Vulnerability (CNVD-2018-04350)

ISC BIND is the United States Internet Systems Consortium ISC company maintains a set of open source software that implements the DNS protocol. A remote denial of service vulnerability exists in ISC BIND. A remote attacker could exploit this vulnerability to cause a denial of service...

TransmissionRPC DNS Rebinding Vulnerability

Transmission is a free BitTorrent BT client developed by the Transmission project team for use on the Linux and Mac OS X platforms, which supports data encryption, corruption repair and seeding. A security vulnerability exists in Transmission 2.92 and earlier versions. A remote attacker can execu...

rubygems: DNS hijacking vulnerability

A vulnerability was found where rubygems did not sanitize DNS responses when requesting the hostname of the rubygems server for a domain, via a rubygems.tcp DNS SRV query. An attacker with the ability to manipulate DNS responses could direct the gem command towards a different domain...

PowerDNS Authoritative Server Module Authentication Bypass Vulnerability (CNVD-2017-38247)

PowerDNS Authoritative Server provides DNS-related products and services. PowerDNS Authoritative Server has an authentication bypass vulnerability in DNSSEC signature verification that could allow a man-in-the-middle attacker to forge signatures and bypass security restrictions...

DNS Cache Poisoning Attack Vulnerability in NIPPON TELEGRAPH AND TELEPHONE EAST PWR-Q200

NIPPON TELEGRAPH AND TELEPHONE EAST PWR-Q200 is a removable wireless router from NIPPON TELEGRAPH AND TELEPHONE EAST, Japan. A DNS cache poisoning attack vulnerability exists in the NIPPON TELEGRAPH AND TELEPHONE EAST PWR-Q200, which originates from the program's failure to use a random value for...

The vulnerability of the DNSAPI.dll library in the Windows operating system’s DNS service allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the DNSAPI.dll library in the Windows operating system’s DNS service is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted DNS responses, or to cause a service failure...

PWR-Q200 vulnerable to DNS cache poisoning attacks

Overview PWR-Q200 provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION is a mobile WiFi router. PWR-Q200 is vulnerable to DNS cache poisoning attacks as DNS queries are done with a fixed source port CWE-330. Toshifumi Sakaguchi reported this vulnerability to IPA. JPCERT/CC coordinated with...

BSA-2017-449

Security Advisory ID : BSA-2017-449 Component : dnsmasq Revision : 2.0: Final A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code...

DEBIAN-CVE-2017-2909

An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over the network to trigger this vulnerability...