62 matches found
Knot Resolver Input Validation Vulnerability
Knot Resolver is a DNS resolver that includes DNS resolver libraries and daemons.DNSSEC validators components is one of the DNS Secure Extended Validation components. An input validation vulnerability exists in the DNSSEC validators component in Knot Resolver versions prior to 1.5.2. An attacker...
PowerDNS Improper Input Validation Vulnerability
PowerDNS is a cross-platform open source DNS service component of the Dutch company PowerDNS , it supports the use of Access mdb files to record DNS information in Windows systems , in Linux/Unix systems to use MySQL to record DNS information.DNSSEC validators components DNSSEC validators compone...
CVE-2018-1000002
Improper input validation bugs in DNSSEC validators components in Knot Resolver prior version 1.5.2 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay...
UBUNTU-CVE-2018-1000003
Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay...
CVE-2018-1000003
Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay...
DEBIAN-CVE-2018-1000002
Improper input validation bugs in DNSSEC validators components in Knot Resolver prior version 1.5.2 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay...
DEBIAN-CVE-2018-1000003
Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay...
CVE-2018-1000002
Improper input validation bugs in DNSSEC validators components in Knot Resolver prior version 1.5.2 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay...
CVE-2018-1000003
Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay...
Input validation
Improper input validation bugs in DNSSEC validators components in Knot Resolver prior version 1.5.2 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay...
CVE-2018-1000003
Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay...
CVE-2018-1000002
Improper input validation bugs in DNSSEC validators components in Knot Resolver prior version 1.5.2 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay...
CVE-2018-1000002
Improper input validation bugs in DNSSEC validators components in Knot Resolver prior version 1.5.2 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay...
CVE-2018-1000003
Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay...
CVE-2018-1000003
Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay...
CVE-2018-1000002
Knot Resolver prior to 1.5.2 contains an insufficient DNSSEC validation flaw (CVE-2018-1000002) that could allow an attacker in MITM to deny existence of some data by forging packets. Fedora advisories and OpenVAS/Nessus entries reference CVE-2018-1000002 and show updates (e.g., knot-resolver pac...
Debian DLA-1150-1 : wpa security update (KRACK)
A vulnerability was found in how WPA code can be triggered to reconfigure WPA/WPA2/RSN keys TK, GTK, or IGTK by replaying a specific frame that is used to manage the keys. Such reinstallation of the encryption key can result in two different types of vulnerabilities: disabling replay protection a...
PT-2017-2629 · Cisco · Cisco Ios Xe +1
Name of the Vulnerable Software and Affected Versions: Cisco IOS Software and Cisco IOS XE Software versions Denali-16.2.1 through Denali-16.3.1 Description: A vulnerability in the Autonomic Networking feature could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affect...
CVE-2006-4436
isakmpd in OpenBSD 3.8, 3.9, and possibly earlier versions, creates Security Associations SA with a replay window of size 0 when isakmpd acts as a responder during SA negotiation, which allows remote attackers to replay IPSec packets and bypass the replay protection...
CVE-2001-1505
The CVE-2001-1505 entry covers tinc versions 1.0pre3 and 1.0pre4, where remote attackers can inject data into user sessions by sniffing and replaying packets. Affected component: tinc (specific versions cited). Underlying issue: packet sniffing/replay enables session data modification (integrity ...