CVE-2022-2795

By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service...

CVE-2022-2795 Processing large delegations may severely degrade resolver performance

By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service...

CVE-2022-2795

CVE-2022-2795 is a DNS resolver vulnerability in BIND where flooding the resolver with specific queries can cause a denial of service by severely degrading resolver performance. The issue is associated with the BIND 9 series (notably 9.16.x, 9.18.x, and 9.19.x branches in various advisories) and ...

CVE-2022-2795

By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service...

PT-2022-6741 · Nlnet +8 · Unbound +8

Name of the Vulnerable Software and Affected Versions: Unbound versions prior to 1.16.3 Description: The issue is related to a Non-Responsive Delegation Attack NRDelegation Attack that affects various DNS resolving software, including Unbound. This attack involves a malicious delegation with a...

Jenkins NS-ND Integration Performance Publisher Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

Jenkins NS-ND Integration Performance Publisher Plugin 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A cross-site scripting...

PT-2022-25743 · Jenkins · Jenkins Ns-Nd Integration Performance Publisher Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins NS-ND Integration Performance Publisher Plugin versions 4.8.0.129 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permissions to connect to an attacker-specified webserver using...

PT-2022-25744 · Jenkins · Jenkins Ns-Nd Integration Performance Publisher Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins NS-ND Integration Performance Publisher Plugin versions 4.8.0.134 and earlier Description: The issue results from the plugin not escaping configuration options of the Execute NetStorm/NetCloud Test build step, leading to a stored...

Security Bulletin: Rational Performance Tester contains a vulnerability which could affect Eclipse Jetty. Rational Performance Tester has taken steps to mitigate this vulnerability.

Summary Eclipse Jetty contains a vulnerability that may allow a remote attacker to exploit this vulnerability to consume CPU that remains high even without any traffic. Vulnerability Details IBM X-Force ID: 230016 DESCRIPTION: Eclipse Jetty is vulnerable to a denial of service, caused by an error...

nodejs-normalize-url: ReDoS for data URLs

A flaw was found in normalize-url. Node.js has a ReDoS regular expression denial of service issue because it has exponential performance for data...

GSD-2022-1005834 powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable

powerpc/perf: Optimize clearing the pending PMI and remove WARNON for PMI check in powerpmudisable This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel versi...

PT-2022-33832 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue concerns an optimization in clearing the pending PMI and removal of a WARN ON for PMI check in power pmu disable. The actual impact and attack plausibility have not yet been prove...

OPENSUSE-SU-2022:10122-1 Security update for virtualbox

This update for virtualbox fixes the following issues: - Remove package virtualbox-guest-x11, which is no longer needed. - Fix screen resizing under Wayland boo1194126 and boo1194126 Version bump to 6.1.36 released by Oracle July 19 2022 This is a maintenance release. The following items were fix...

PT-2025-18481

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, which prevented bpf program recursion for raw tracepoint probes. The issue was caused by a bpf program attached to the contention...

Promiscous VLAN Tag Drops: Cause, Symptoms, and Solution

The counter nicerrvlanpromisctagdrops is incrementing. This may also cause performance issues and/or exceed the limits of a bandwidth license, triggering packet loss...

kernel: race condition in perf_event_open leads to privilege escalation

A use-after-free flaw was found in the Linux kernel’s performance events functionality. A user triggers a race condition in setting up performance monitoring between the leading PERFTYPETRACEPOINT and sub PERFEVENTHARDWARE plus the PERFEVENTSOFTWARE using the perfeventopen function with these thr...

More data flow occupies by PVS server after copy/paste vdisk in use on NAS storage

Since customer need to execute scheduled backup tasks and vdisk update tasks,administrator may copy vdisk, which is in-using for data streaming from PVS server. Sometimes, data flow to NAS storage will increase even vDisk copy operation is finished. As the result, end user will experience pool...

SUSE: Security Advisory (SUSE-SU-2022:1064-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: cloudcompare-2.11.3-4.fc37

CloudCompare is a 3D point cloud and triangular mesh processing software. It has been originally designed to perform comparison between two 3D points clouds such as the ones obtained with a laser scanner or between a point cloud and a triangular mesh. It relies on a specific octree structure that...