Lucene search
+L

4100 matches found

osv_alpine
osv_alpine
•added 2023/03/14 5:15 p.m.•13 views

ALPINE-CVE-2023-27585

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to...

7.5CVSS7.4AI score0.02311EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2023/03/14 5:15 p.m.•8 views

DEBIAN-CVE-2023-27585

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to...

7.5CVSS8.4AI score0.02311EPSS
SaveExploits1References1
NVD
NVD
•added 2023/03/14 5:15 p.m.•35 views

CVE-2023-27585

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to...

7.5CVSS7.6AI score0.02311EPSS
SaveExploits1References8
Prion
Prion
•added 2023/03/14 5:15 p.m.•28 views

Buffer overflow

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to...

5CVSS7.5AI score0.02311EPSS
SaveExploits1References7Affected Software1
UbuntuCve
UbuntuCve
•added 2023/03/14 5:15 p.m.•46 views

CVE-2023-27585

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to...

7.5CVSS7.3AI score0.02311EPSS
SaveExploits1References7
osv_ubuntu
osv_ubuntu
•added 2023/03/14 5:15 p.m.•24 views

UBUNTU-CVE-2023-27585

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to...

7.5CVSS7.4AI score0.02311EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2023/03/14 12:00 a.m.•84 views

CVE-2023-27585

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to...

7.5CVSS8.2AI score0.02311EPSS
SaveExploits1References7
osv_cve
osv_cve
•added 2023/03/14 12:00 a.m.•38 views

CVE-2023-27585

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to...

7.5CVSS7.9AI score
SaveExploits0References10
Debian CVE
Debian CVE
•added 2023/03/14 12:00 a.m.•40 views

CVE-2023-27585

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to...

7.5CVSS8.4AI score0.02311EPSS
SaveExploits1
Mend
Mend
•added 2023/03/14 12:00 a.m.•8 views

CVE-2023-27585

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to...

8.7CVSS0.02311EPSS
SaveExploits1References12
Vulnrichment
Vulnrichment
•added 2023/03/14 12:00 a.m.•8 views

CVE-2023-27585

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to...

7.5CVSS7.6AI score0.02311EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2023/03/14 12:00 a.m.•8 views

PT-2023-21227

Name of the Vulnerable Software and Affected Versions PJSIP versions 2.13 and prior Description A buffer overflow issue affects applications using the PJSIP DNS resolver, specifically in the parse query function. This issue does not impact PJSIP users who do not use the PJSIP DNS resolver...

9.1CVSS7.7AI score0.02339EPSS
SaveExploits1References48
CVE
CVE
•added 2023/03/14 12:00 a.m.•197 views

CVE-2023-27585

Summary: CVE-2023-27585 affects the PJSIP DNS resolver in the pjproject library. The vulnerability is a buffer overflow in the parsing of DNS query records (parse_query()) for versions 2.13 and earlier. Impact: as described, it can cause a crash (availability impact) with no confidentiality/integ...

7.5CVSS7.5AI score0.02311EPSS
SaveExploits1References8Affected Software1
AlpineLinux
AlpineLinux
•added 2023/03/14 12:00 a.m.•110 views

CVE-2023-27585

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to...

7.5CVSS7.7AI score0.02311EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/14 12:00 a.m.•8 views

CVE-2023-27585: Heap-based Buffer Overflow

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to...

7.5CVSS6.2AI score0.02311EPSS
SaveExploits1References3
Veracode
Veracode
•added 2023/02/26 7:45 p.m.•31 views

Denial Of Service (DoS)

knot-resolver is vulnerable to Denial Of Service DoS. The vulnerability exists because the single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response, allowing an attacker to crash the application...

7.5CVSS7.2AI score0.00708EPSS
SaveExploits0References2Affected Software1
SUSE CVE
SUSE CVE
•added 2023/02/22 2:54 a.m.•18 views

SUSE CVE-2023-26249

Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service. Specifically, a single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response...

7.5CVSS6.8AI score0.00708EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2023/02/22 12:00 a.m.•105 views

Knot Resolver < 5.6.0 DoS Vulnerability

Knot Resolver is prone to a denial of service DoS vulnerability. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

7.5CVSS7.5AI score0.00708EPSS
SaveExploits0References1
F5 Networks
F5 Networks
•added 2023/02/21 7:59 p.m.•270 views

K12331123: NGINX Plus and Open Source vulnerability CVE-2021-23017

Security Advisory Description An issue in NGINX resolver may allow an attacker who is able to forge UDP packets from the specified DNS server to cause a 1-byte memory overwrite, resulting in a worker process crash or other unspecified impact. CVE-2021-23017 Impact A remote attacker can cause a...

7.7CVSS7.3AI score0.53461EPSS
SaveExploits10Affected Software3
F5 Networks
F5 Networks
•added 2023/02/21 7:57 p.m.•34 views

K00724442: BIG-IP DNS and GTM DNSSEC security exposure

Security Advisory Description The BIG-IP DNSSEC implementation returns an incorrect NSEC3 record for a DNS query for a resource record type, which does not exist at given name. The incorrect record indicates that only one of TXT/HINFO/RP resource record types exists at given name, even if A or AA...

6.8AI score
SaveExploits0
Rows per page
Query Builder