4083 matches found
RHEL 7 : unbound (RHSA-2024:11003)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:11003 advisory. The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: bind9: KeyTrap - Extreme CPU...
Malicious code in unity-react-resolver (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11478 Malicious code in unity-react-resolver (npm)
--- -= Per source details. Do not edit below this line.=-...
dev.sigstore:sigstore-maven-plugin (>=1.0.0, <=1.1.0), org.apache.maven.resolver:maven-resolver-generator-sigstore (>=2.0.2, <=2.0.4) +1 more potentially affected by CVE-2024-54140 via dev.sigstore:sigstore-java (>=1.0.0, <=1.1.0)
dev.sigstore:sigstore-java MAVEN version =1.0.0, =1.0.0, =2.0.2, =2.0.3, =2.0.4 Source cves: CVE-2024-54140 Source advisory: OSV:GHSA-JP26-88MW-89QR...
dev.sigstore:sigstore-maven-plugin (>=1.0.0, <=1.1.0), org.apache.maven.resolver:maven-resolver-generator-sigstore (>=2.0.2, <=2.0.4) +1 more potentially affected by CVE-2024-54140 via dev.sigstore:sigstore-java (>=1.0.0, <=1.1.0)
dev.sigstore:sigstore-java MAVEN version =1.0.0, =1.0.0, =2.0.2, =2.0.3, =2.0.4 Source cves: CVE-2024-54140 Source advisory: GHSA-JP26-88MW-89QR...
SUSE CVE-2024-29018
Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. Moby's networking implementation allows for many networks, each with their own IP address range and gateway, to be defined. This feature i...
com.kakawait:cas-security-dynamic-service-resolver (>=0.1.0, <=0.4.0), com.kakawait:cas-security-spring-boot-autoconfigure (>=0.1.0, <=0.3.2) +9 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-cas (>=4.2.2.release, <=4.2.14.release)
org.springframework.security:spring-security-cas MAVEN version =4.2.2.release, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =9.4.0.10, =2.3.0, =2.3.0, =5.20.2, =5.21.1, =5.22.7 Source cves: CVE-2024-38827 Source advisory: MEND:CVE-2024-38827...
dev.sigstore:sigstore-maven-plugin (1.0.0), org.apache.maven.resolver:maven-resolver-generator-sigstore (>=2.0.2, <=2.0.4) +1 more potentially affected by CVE-2024-53267 via dev.sigstore:sigstore-java (1.0.0)
dev.sigstore:sigstore-java MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on dev.sigstore:sigstore-java and may be impacted: - dev.sigstore:sigstore-maven-plugin 1.0.0 - org.apache.maven.resolver:maven-resolver-generator-sigstore...
dev.sigstore:sigstore-maven-plugin (1.0.0), org.apache.maven.resolver:maven-resolver-generator-sigstore (>=2.0.2, <=2.0.4) +1 more potentially affected by CVE-2024-53267 via dev.sigstore:sigstore-java (1.0.0)
dev.sigstore:sigstore-java MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on dev.sigstore:sigstore-java and may be impacted: - dev.sigstore:sigstore-maven-plugin 1.0.0 - org.apache.maven.resolver:maven-resolver-generator-sigstore...
dev.sigstore:sigstore-maven-plugin (1.0.0), org.apache.maven.resolver:maven-resolver-generator-sigstore (>=2.0.2, <=2.0.4) +1 more potentially affected by CVE-2024-53267 via dev.sigstore:sigstore-java (1.0.0)
dev.sigstore:sigstore-java MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on dev.sigstore:sigstore-java and may be impacted: - dev.sigstore:sigstore-maven-plugin 1.0.0 - org.apache.maven.resolver:maven-resolver-generator-sigstore...
PT-2024-35658
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel. The issue is related to the net/l2tp module, specifically in the l2tp exit net function. The problem occurs when the IDR ID Resolve...
OESA-2024-2390 dhcp security update
The Dynamic Host Configuration Protocol DHCP is a network management protocol used on UDP/IP networks whereby a DHCP server dynamically assigns an IP address and other network configuration parameters to each device on a network so they can communicate with other IP networks. Security Fixes:...
dnspython: denial of service in stub resolver
The dnspython stub resolver is vulnerable to a denial of service DoS risk if an attacker sends a malicious response forged with the correct address and port before a legitimate one arrives on the UDP port used by dnspython for the query. In such cases, dnspython could either switch to another...
ALSA-2024:9423 Moderate: python-dns security update
The python-dns package contains the dnslib module that implements a DNS client and additional modules that define certain symbolic constants used by DNS, such as dnstype, dnsclass and dnsopcode. Security Fixes: dnspython: denial of service in stub resolver CVE-2023-29483 For more details about th...
MGASA-2024-0342 Updated bind packages fix security vulnerabilities
A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack. CVE-2024-0760 Resolver caches and authoritative zone databases that...
Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2024-2713)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2024-2747)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2024-2765)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 39 Update: unbound-1.21.1-3.fc39
Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...