gopassivedns

gopassivedns 네트워크 기반 DNS 로깅 Go 요약 네트워크 캡처 기반 DNS 로거로, https://github.com/gamelinux/passivedns에서 영감을 받았습니다. gopacket을 사용하여 libpcap 및 패킷 처리를 다룹니다. JSON 로그를 출력합니다. 하나에서 수백 개의 DNS 리졸버가 있는 환경에서 높은 볼륨의 쿼리 캡처를 처리하기 위한 것입니다. gamelinux의 PassiveDNS를 사용하지 않는 이유는? 좋은 선택입니다. 저는 이 도구를 만든 이유는 문서화되지 않은 많은 에지 케이스...

research

연구 — Bertoldi Cybersecurity Alessandro Bertoldi와 협력자들이 발표한 보안 연구. 논문 제목| 행사| 연도| 링크 ---|---|---|--- Infinity-Day at Scale: Hijacking Registrars, Defeating 2FA and Spoofing 17,000+ Domains| DeepSec Vienna 2025| 2025| PDF 저자 Infinity-Day at Scale DeepSec Vienna 2025 주 저자: Alessandro Bertoldi 공동 저자:...

Rocky Linux 10.1 [CIQ] Security Update: keylime / keylime-base / keylime-registrar / keylime-selinux / etc (crlsa-2025_23201)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202523201 advisory. keylime: Keylime: Registrar allows identity takeover via duplicate UUID registration CVE-2025-13609 Tenable has extracted the preceding description block direct...

Rocky Linux 9 [CIQ] Security Update: keylime / keylime-base / keylime-registrar / keylime-selinux / etc (crlsa-2025_23210)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202523210 advisory. keylime: Keylime: Registrar allows identity takeover via duplicate UUID registration CVE-2025-13609 Tenable has extracted the preceding description block directly...

CLEANSTART-2026-YH81834 Security fix for CVE-2024-45341 applied in: flux-notification-controller-fips 1.5.0-r0, ingress-nginx-controller 1.24.2-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0

CVE-2024-45341 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZC33521 Security fix for CVE-2025-22873 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, flux-notification-controller-fips 1.5.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, nvidia-container-toolkit 1.19.0-r0, prometheus-node-exporter 1.8.0-r3, runc 1.1.14-r0

CVE-2025-22873 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CVE-2026-52023

An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the imsregistrarpcscf module, specifically the pcscfsavepending/savepending path and security-agreement parsing in secagree.c:parsesecagree...

CVE-2026-52023

An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the imsregistrarpcscf module, specifically the pcscfsavepending/savepending path and security-agreement parsing in secagree.c:parsesecagree...

DEBIAN-CVE-2026-82608

A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function get4bytes of the file src/modules/imsregistrarscscf/cxdxavp.c of the component AVP Handler. Executing a manipulation can lead to out-of-bounds read. The attack may be performed from remote. The exploit has bee...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: falco-no-driver, external-dns, mongo-tools, kube-metrics-adapter-fips, gops, kafka-proxy-fips, regclient-fips, ansible-operator, external-dns-fips, ko, atlantis, metacontroller, stampdalf, gostatsd, litefs, cert-exporter, harbor, terraform-provider-sendgrid, flux,...

CLEANSTART-2026-IG79399 Security fixes in kubernetes-csi-node-driver-registrar 2.13.0-r1

Package kubernetes-csi-node-driver-registrar version 2.13.0-r1 fixes 6 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-YT96362 Security fixes in kubernetes-csi-node-driver-registrar-fips 2.16.0-r3

Package kubernetes-csi-node-driver-registrar-fips version 2.16.0-r3 fixes 13 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-29181, CVE-2026-39820, CVE-2026-42499, CVE-2026-39836...

CLEANSTART-2026-FM34446 Security fixes in kubernetes-csi-node-driver-registrar 2.13.0-r0

Package kubernetes-csi-node-driver-registrar version 2.13.0-r0 fixes 59 vulnerabilities: CVE-2024-45336, CVE-2024-45341, CVE-2025-0913, CVE-2025-22866, CVE-2025-22870...

CLEANSTART-2026-TI99116 Security fixes in kubernetes-csi-node-driver-registrar-fips 2.15.0-r5

Package kubernetes-csi-node-driver-registrar-fips version 2.15.0-r5 fixes 2 vulnerabilities: CVE-2026-25681, CVE-2026-25680...

CLEANSTART-2026-SP49860 Security fixes in kubernetes-csi-node-driver-registrar-fips 2.16.0-r4

Package kubernetes-csi-node-driver-registrar-fips version 2.16.0-r4 fixes 6 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-SA81922 Security fixes for CVE-2024-45336, CVE-2024-45341, CVE-2025-0913, CVE-2025-22866, CVE-2025-22870, CVE-2025-22871, CVE-2025-22872, CVE-2025-22873, CVE-2025-4673, CVE-2025-4674, CVE-2025-47906, CVE-2025-47907, CVE-2025-47911, CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, ghsa-p77j-4mvh-x3m3, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 2.13.0-r0, 2.13.0-r1

Multiple security vulnerabilities affect the kubernetes-csi-node-driver-registrar package. These issues are resolved in later releases. See references for individual vulnerability details...

PYSEC-2026-1488 Keylime registrar is vulnerable to Denial-of-Service attack when updated to version 7.12.0

Impact The Keylime registrar implemented more strict type checking on version 7.12.0. As a result, when updated to version 7.12.0, the registrar will not accept the format of the data previously stored in the database by versions = 7.8.0, raising an exception. This makes the Keylime registrar...

Keylime registrar is vulnerable to Denial-of-Service attack when updated to version 7.12.0

ImpactThe Keylime registrar implemented more strict type checking on version 7.12.0. As a result, when updated to version 7.12.0, the registrar will not accept the format of the data previously stored in the database by versions = 7.8.0, raising an exception.This makes the Keylime registrar...

Keylime's registrar vulnerable to Denial-of-service attack via a single open connection

ImpactKeylime registrar is prone to a simple denial of service attack in which an adversary opens a connection to the TLS port by default, port 8891 blocking further, legitimate connections. As long as the connection is open, the registrar is blocked and cannot serve any further clients agents an...

PYSEC-2026-1489 Keylime's registrar vulnerable to Denial-of-service attack via a single open connection

Impact Keylime registrar is prone to a simple denial of service attack in which an adversary opens a connection to the TLS port by default, port 8891 blocking further, legitimate connections. As long as the connection is open, the registrar is blocked and cannot serve any further clients agents a...