CVE-2019-25042

CVE-2019-25042 concerns Unbound, where an out-of-bounds write can occur in the rdata_copy path when handling compressed names. The descriptor consistently cites Unbound versions before 1.9.5 as affected, with the root cause listed as an out-of-bounds write via compressed names. The vendor dispute...

NLnet Labs Unbound 注入漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. A configuration injection vulnerability exists in createunboundadservers.sh in versions of Unbound prior to 1.9.5. A man-in-the-middle attacker can exploit this vulnerability to inject configuration via a plainte...

NLnet Labs Unbound 安全漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An assertion failure vulnerability exists in synthcname in versions of Unbound prior to 1.9.5. An attacker could exploit this vulnerability to cause a denial of service...

Unbound 安全漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An infinite loop vulnerability exists in dnamepktcopy in Unbound versions prior to 1.9.5. An attacker can exploit this vulnerability by compressing names to cause an infinite loop...

Unbound 输入验证错误漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in sldnsstr2wirednamebuforigin in versions of Unbound prior to 1.9.5. An attacker could exploit this vulnerability to cause an out-of-bounds write...

Unbound 缓冲区错误漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An out-of-bounds write vulnerability exists in sldnsbgettokenpar in versions of Unbound prior to 1.9.5. An attacker can exploit this vulnerability to cause an out-of-bounds write...

NLnet Labs Unbound 输入验证错误漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in the region allocator in versions of Unbound prior to 1.9.5. An attacker can exploit this vulnerability to cause an integer overflow via regionalloc...

NLnet Labs Unbound 缓冲区错误漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An out-of-bounds write vulnerability exists in rdatacopy in versions of Unbound prior to 1.9.5. An attacker can exploit this vulnerability by compressing names to cause an out-of-bounds write...

Unbound 输入验证错误漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in the size calculation in dnscrypt/dnscrypt.c in versions of Unbound prior to 1.9.5. No detailed vulnerability details are provided at this time...

NLnet Labs Unbound 安全漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An assertion failure vulnerability exists in dnamepktcopy in versions of Unbound prior to 1.9.5. An attacker can exploit this vulnerability via invalid packets to cause a denial of service...

NLnet Labs Unbound 安全漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An assertion failure vulnerability exists in dnamepktcopy in versions of Unbound prior to 1.9.5. An attacker can exploit this vulnerability by compressing names to cause an assertion failure...

SUSE: Security Advisory (SUSE-SU-2020:1819-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated firefox packages fix security vulnerabilities

Texture upload into an unbound backing buffer resulted in an out-of-bound read. CVE-2021-23981 Angle graphics library out of date. CVE-2021-4127 Internal network hosts could have been probed by a malicious webpage. CVE-2021-23982 Malicious extensions could have spoofed popup information...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2021:0966-1)

This update for MozillaFirefox fixes the following issues : Firefox was updated to 78.9.0 ESR MFSA 2021-11, bsc1183942 - CVE-2021-23981: Texture upload into an unbound backing buffer resulted in an out-of-bound read - CVE-2021-23982: Internal network hosts could have been probed by a malicious...

MGASA-2021-0154 Updated unbound packages fix a security vulnerability

Unbound contains a local vulnerability that would allow for a local symlink attack. When writing the PID file Unbound creates the file if it is not there, or opens an existing file for writing. In case the file was already present, it would follow symlinks if the file happened to be a symlink...

Updated unbound packages fix a security vulnerability

Unbound contains a local vulnerability that would allow for a local symlink attack. When writing the PID file Unbound creates the file if it is not there, or opens an existing file for writing. In case the file was already present, it would follow symlinks if the file happened to be a symlink...

Mozilla: Texture upload into an unbound backing buffer resulted in an out-of-bound read

The Mozilla Foundation Security Advisory describes this issue as: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash...

Mozilla: Texture upload into an unbound backing buffer resulted in an out-of-bound read

The Mozilla Foundation Security Advisory describes this issue as: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash...

Mozilla: Texture upload into an unbound backing buffer resulted in an out-of-bound read

The Mozilla Foundation Security Advisory describes this issue as: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash...

Mozilla: Texture upload into an unbound backing buffer resulted in an out-of-bound read

The Mozilla Foundation Security Advisory describes this issue as: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash...