com.netki:wallet-name-resolver (0.1.3) potentially affected by unknown CVE via org.jitsi:dnssecjava (1.1)

org.jitsi:dnssecjava MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jitsi:dnssecjava and may be impacted: - com.netki:wallet-name-resolver 0.1.3 Source cves: unknown CVE Source advisory: OSV:GHSA-CRJG-W57M-RQQF...

com.netki:wallet-name-resolver (>=0.0.2, <=0.0.5) potentially affected by unknown CVE via org.jitsi:dnssecjava (2.0.0)

org.jitsi:dnssecjava MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jitsi:dnssecjava and may be impacted: - com.netki:wallet-name-resolver =0.0.2, =0.0.5 Source cves: unknown CVE Source advisory: OSV:GHSA-CRJG-W57M-RQQF...

GHSA-CRJG-W57M-RQQF DNSJava vulnerable to KeyTrap - Denial-of-Service Algorithmic Complexity Attacks

Impact Users using the ValidatingResolver for DNSSEC validation can run into CPU exhaustion with specially crafted DNSSEC-signed zones. Patches Users should upgrade to dnsjava v3.6.0 Workarounds Although not recommended, only using a non-validating resolver, will remove the vulnerability...

DNSJava vulnerable to KeyTrap - Denial-of-Service Algorithmic Complexity Attacks

Impact Users using the ValidatingResolver for DNSSEC validation can run into CPU exhaustion with specially crafted DNSSEC-signed zones. Patches Users should upgrade to dnsjava v3.6.0 Workarounds Although not recommended, only using a non-validating resolver, will remove the vulnerability...

com.netki:wallet-name-resolver (>=0.0.2, <=0.0.5) potentially affected by CVE-2023-50387 via org.jitsi:dnssecjava (2.0.0)

org.jitsi:dnssecjava MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jitsi:dnssecjava and may be impacted: - com.netki:wallet-name-resolver =0.0.2, =0.0.5 Source cves: CVE-2023-50387 Source advisory: GHSA-CRJG-W57M-RQQF...

com.netki:wallet-name-resolver (>=0.1.0, <=0.1.1) potentially affected by unknown CVE via org.jitsi:dnssecjava (1.0)

org.jitsi:dnssecjava MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jitsi:dnssecjava and may be impacted: - com.netki:wallet-name-resolver =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-MMWX-RJ87-VFGR...

com.netki:wallet-name-resolver (>=0.0.2, <=0.0.5) potentially affected by CVE-2023-50868 via org.jitsi:dnssecjava (2.0.0)

org.jitsi:dnssecjava MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jitsi:dnssecjava and may be impacted: - com.netki:wallet-name-resolver =0.0.2, =0.0.5 Source cves: CVE-2023-50868 Source advisory: GHSA-MMWX-RJ87-VFGR...

DNSJava affected by KeyTrap - NSEC3 closest encloser proof can exhaust CPU resources

Impact Users using the ValidatingResolver for DNSSEC validation can run into CPU exhaustion with specially crafted DNSSEC-signed zones. Patches Users should upgrade to dnsjava v3.6.0 Workarounds Although not recommended, only using a non-validating resolver, will remove the vulnerability...

com.netki:wallet-name-resolver (0.1.3) potentially affected by unknown CVE via org.jitsi:dnssecjava (1.1)

org.jitsi:dnssecjava MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jitsi:dnssecjava and may be impacted: - com.netki:wallet-name-resolver 0.1.3 Source cves: unknown CVE Source advisory: OSV:GHSA-MMWX-RJ87-VFGR...

GHSA-MMWX-RJ87-VFGR DNSJava affected by KeyTrap - NSEC3 closest encloser proof can exhaust CPU resources

Impact Users using the ValidatingResolver for DNSSEC validation can run into CPU exhaustion with specially crafted DNSSEC-signed zones. Patches Users should upgrade to dnsjava v3.6.0 Workarounds Although not recommended, only using a non-validating resolver, will remove the vulnerability...

com.netki:wallet-name-resolver (>=0.0.2, <=0.0.5) potentially affected by unknown CVE via org.jitsi:dnssecjava (2.0.0)

org.jitsi:dnssecjava MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jitsi:dnssecjava and may be impacted: - com.netki:wallet-name-resolver =0.0.2, =0.0.5 Source cves: unknown CVE Source advisory: OSV:GHSA-MMWX-RJ87-VFGR...

GHSA-CFXW-4H78-H7FW DNSJava DNSSEC Bypass

Summary Records in DNS replies are not checked for their relevance to the query, allowing an attacker to respond with RRs from different zones. Details DNS Messages are not authenticated. They do not guarantee that - received RRs are authentic - not received RRs do not exist - all or any received...

PT-2024-21058

Name of the Vulnerable Software and Affected Versions dnsjava versions prior to 3.6.0 Description The issue arises from dnsjava not checking the relevance of records in DNS replies to the query, allowing an attacker to respond with records from different zones. This can lead to applications blind...

Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2024-1903)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CBL Mariner 2.0 Security Update: bind (CVE-2023-6516)

The version of bind installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6516 advisory. - To keep its cache database efficient, named running as a recursive resolver occasionally attempts to clean up t...

CBL Mariner 2.0 Security Update: c-ares / fluent-bit / grpc / nodejs (CVE-2023-31147)

The version of c-ares / fluent-bit / grpc / nodejs installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-31147 advisory. - c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom a...

amusing-app (>=0.2.0, <=0.4.2), buzz-captions (>=1.0.0, <=1.1.0) +10 more potentially affected by CVE-2024-38519 via yt-dlp (>=2024.3.10, <=2024.5.27)

yt-dlp PYPI version =2024.3.10, =0.2.0, =1.0.0, =1.3.5, =0.6.22, =0.2.0, =0.0.5, =0.0.1, =0.1.50, =0.8.0, =2024.3.19, =2024.6.6 Source cves: CVE-2024-38519 Source advisory: GHSA-79W7-VH3H-8G4J...

dnspython: denial of service in stub resolver

The dnspython stub resolver is vulnerable to a denial of service DoS risk if an attacker sends a malicious response forged with the correct address and port before a legitimate one arrives on the UDP port used by dnspython for the query. In such cases, dnspython could either switch to another...

Prototype Pollution

@apphp/object-resolver is vulnerable to Prototype Pollution. The vulnerability is due to manipulation of the prototype via the function Module.setNestedProperty, potentially allowing attackers to modify object properties to execute arbitrary code...

Rancher's External RoleTemplates can lead to privilege escalation

Impact A vulnerability has been identified whereby privilege escalation checks are not properly enforced for RoleTemplateobjects when external=true, which in specific scenarios can lead to privilege escalation. The bug in the webhook rule resolver ignores rules from a ClusterRole for external...