Lucene search
K

262 matches found

Tenable Nessus
Tenable Nessus
added 2018/11/02 12:0 a.m.26 views

F5 Networks BIG-IP : BIG-IP DNS Cache vulnerability (K48224824)

On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within the DNS Cache of TMM may continue to be resolved by the cache even after the parent server revokes the record, if the DNS Cache is receiving a stream of requests for the cached name. CVE-2018-5532...

5.3CVSS5.7AI score0.01165EPSS
Exploits0References2
Fedora
Fedora
added 2018/10/10 9:55 p.m.28 views

[SECURITY] Fedora 27 Update: pdns-4.1.4-1.fc27.1

The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...

5.5CVSS1.4AI score0.02034EPSS
Exploits1
UbuntuCve
UbuntuCve
added 2018/06/12 12:0 a.m.28 views

CVE-2018-5738

Change 4777 introduced in October 2017 introduced an unforeseen issue in releases which were issued after that date, affecting which clients are permitted to make recursive queries to a BIND nameserver. The intended and documented behavior is that if an operator has not specified a value for the...

7.5CVSS6.8AI score0.18406EPSS
Exploits0References3
OSV
OSV
added 2018/06/12 12:0 a.m.1 views

UBUNTU-CVE-2018-5738

Change 4777 introduced in October 2017 introduced an unforeseen issue in releases which were issued after that date, affecting which clients are permitted to make recursive queries to a BIND nameserver. The intended and documented behavior is that if an operator has not specified a value for the...

7.5CVSS7.1AI score0.18406EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2018/03/12 12:0 a.m.21 views

Solaris 10 (sparc) : 148625-01

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: in.tnamed1M. Supported versions that are affected are 9 and 10. Easily exploitable vulnerability allows successful unauthenticated network attacks via NameServer. Successful attack of this vulnerability can result i...

5CVSS5.3AI score0.02584EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2018/03/12 12:0 a.m.16 views

Solaris 10 (x86) : 148626-01

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: in.tnamed1M. Supported versions that are affected are 9 and 10. Easily exploitable vulnerability allows successful unauthenticated network attacks via NameServer. Successful attack of this vulnerability can result i...

5CVSS5.3AI score0.02584EPSS
Exploits0References2
Fedora
Fedora
added 2018/02/02 5:40 p.m.22 views

[SECURITY] Fedora 27 Update: pdns-4.1.0-1.fc27

The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...

7.1CVSS1.4AI score0.01265EPSS
Exploits0
Fedora
Fedora
added 2017/01/29 12:50 a.m.28 views

[SECURITY] Fedora 24 Update: pdns-4.0.3-1.fc24

The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...

7.8CVSS1.4AI score0.07294EPSS
Exploits0
Fedora
Fedora
added 2017/01/29 12:23 a.m.33 views

[SECURITY] Fedora 25 Update: pdns-4.0.3-1.fc25

The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...

7.8CVSS1.4AI score0.07294EPSS
Exploits0
Kitploit
Kitploit
added 2017/01/18 2:30 p.m.15 views

JudasDNS - Nameserver DNS poisoning attacks made easy

A DNS proxy server built to be deployed in place of a taken over nameserver to perform targeted exploitation. Judas works by proxying all DNS queries to the legitimate nameservers for a domain. The magic comes with Judas's rule configurations which allow you to change DNS responses depending on...

6.8AI score
Exploits0References2
The Hacker Blog
The Hacker Blog
added 2017/01/12 9:26 a.m.20 views

Respect My Authority – Hijacking Broken Nameservers to Compromise Your Target

In a past piece of research, we explored the issue of nameserver domains expiring allowing us to take over full control of a target domain. In that example we took over the domain name maris.int by buying an expired domain name which was authoritative for the domain. This previous example happene...

2.2AI score
Exploits0
The Hacker Blog
The Hacker Blog
added 2017/01/12 9:26 a.m.20 views

Respect My Authority – Hijacking Broken Nameservers to Compromise Your Target

In a past piece of research, we explored the issue of nameserver domains expiring allowing us to take over full control of a target domain. In that example we took over the domain name maris.int by buying an expired domain name which was authoritative for the domain. This previous example happene...

6.9AI score
Exploits0
Fedora
Fedora
added 2016/10/01 4:24 a.m.37 views

[SECURITY] Fedora 23 Update: pdns-3.4.10-1.fc23

The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...

7.5CVSS1.4AI score0.62982EPSS
Exploits0
Cent OS
Cent OS
added 2016/09/28 2:0 p.m.210 views

bind, caching security update

CentOS Errata and Security Advisory CESA-2016:1944 An update for bind is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scorin...

7.8CVSS7.1AI score0.89482EPSS
Exploits7References7
Tenable Nessus
Tenable Nessus
added 2016/09/28 12:0 a.m.20 views

openSUSE Security Update : bind (openSUSE-2016-1133)

The nameserver bind was updated to fix a remote denial of service vulnerability, where a crafted packet could cause the nameserver to abort. CVE-2016-2776, bsc1000362 This update was imported from the SUSE:SLE-12-SP1:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

7.8CVSS7.4AI score0.89482EPSS
Exploits7References2
OSV
OSV
added 2016/09/27 4:3 p.m.6 views

SUSE-SU-2016:2401-1 Security update for bind

The nameserver bind was updated to fix a remote denial of service vulnerability, where a crafted packet could cause the nameserver to abort. CVE-2016-2776, bsc1000362...

7.8CVSS6.4AI score0.89482EPSS
Exploits7References3
OSV
OSV
added 2016/09/27 4:3 p.m.12 views

SUSE-SU-2016:2399-1 Security update for bind

The nameserver bind was updated to fix a remote denial of service vulnerability, where a crafted packet could cause the nameserver to abort. CVE-2016-2776, bsc1000362...

7.8CVSS6.4AI score0.89482EPSS
Exploits7References3
NVD
NVD
added 2016/09/27 3:59 p.m.25 views

CVE-2016-6146

The NameServer in SAP TREX 7.10 Revision 63 allows remote attackers to obtain sensitive TNS information via an unspecified query, aka SAP Security Note 2234226...

5.3CVSS5.2AI score0.01969EPSS
Exploits0References5
Prion
Prion
added 2016/09/27 3:59 p.m.15 views

Information disclosure

The NameServer in SAP TREX 7.10 Revision 63 allows remote attackers to obtain sensitive TNS information via an unspecified query, aka SAP Security Note 2234226...

5CVSS6.8AI score0.01969EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2016/09/27 3:0 p.m.33 views

CVE-2016-6146

The NameServer in SAP TREX 7.10 Revision 63 allows remote attackers to obtain sensitive TNS information via an unspecified query, aka SAP Security Note 2234226...

5.2AI score0.01969EPSS
Exploits0References5
Rows per page
Query Builder