Lucene search
+L

2601 matches found

OpenVAS
OpenVAS
added 2025/10/24 12:0 a.m.2 views

Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2025-2313)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.7CVSS6.7AI score0.0019EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2025/10/24 12:0 a.m.3 views

Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2025-2281)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.7CVSS6.7AI score0.0019EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2025/10/23 11:53 p.m.4 views

SUSE CVE-2025-11411

NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are...

6.9CVSS6.4AI score0.00319EPSS
SaveExploits0References12
EUVD
EUVD
added 2025/10/22 3:31 p.m.3 views

EUVD-2025-35360

NLnet Labs Unbound up to and including version 1.24.0 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are...

7.1CVSS6.3AI score0.00319EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/22 1:15 p.m.5 views

AZL-68675 CVE-2025-11411 affecting package unbound for versions less than 1.19.1-5

NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are...

7.1CVSS5.7AI score0.00319EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/22 1:15 p.m.4 views

CVE-2025-11411

NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are...

7.1CVSS0.00319EPSS
SaveExploits0References4
OSV
OSV
added 2025/10/22 1:15 p.m.24 views

AZL-68796 CVE-2025-11411 affecting package unbound for versions less than 1.19.1-4

NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are...

7.1CVSS7.3AI score0.00319EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/22 1:15 p.m.2 views

DEBIAN-CVE-2025-11411

NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are...

7.1CVSS6.7AI score0.00319EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/22 1:15 p.m.4 views

UBUNTU-CVE-2025-11411

NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are...

7.1CVSS7.2AI score0.00319EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2025/10/22 12:28 p.m.17 views

CVE-2025-11411 Possible domain hijacking via promiscuous records in the authority section

NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are...

7.1CVSS0.00319EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/22 12:28 p.m.2 views

CVE-2025-11411 Possible domain hijacking via promiscuous records in the authority section

NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are...

7.1CVSS6AI score0.00319EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/22 12:28 p.m.474 views

CVE-2025-11411

Summary: CVE-2025-11411 affects NLnet Labs Unbound up to and including 1.24.1, enabling possible domain hijack via promiscuous NS RRSets injected in DNS responses. The root issue is that NS RRSets in replies could be trusted for delegation updates, allowing a malicious actor to poison caches. The...

7.1CVSS6AI score0.00319EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2025/10/22 12:28 p.m.1 views

CVE-2025-11411

NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are...

7.1CVSS6.4AI score0.00319EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2025/10/22 12:28 p.m.7 views

CVE-2025-11411

NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are...

7.1CVSS8.7AI score0.00319EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.7 views

NLnet Labs Unbound 安全漏洞

NLnet Labs Unbound is a high-performance DNS resolver open-sourced by NLnet Labs. A security vulnerability exists in NLnet Labs Unbound version 1.24.0 and earlier, which stems from an uncleaned set of unsolicited NS records and could lead to a domain hijacking attack...

7.1CVSS6AI score0.00319EPSS
SaveExploits0References6
FreeBSD
FreeBSD
added 2025/10/22 12:0 a.m.9 views

unbound -- Possible domain hijacking via promiscuous records in the authority section

[email protected] reports: NLnet Labs Unbound up to and including version 1.24.0 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone...

7.1CVSS6.8AI score0.00319EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2025/10/21 2:50 p.m.14 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.0 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.0 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

9.1CVSS6.9AI score0.7439EPSS
SaveExploits5References16
OpenVAS
OpenVAS
added 2025/10/13 12:0 a.m.4 views

Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2025-2250)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.7CVSS6.7AI score0.0019EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2025/10/13 12:0 a.m.6 views

Huawei EulerOS: Security Advisory for unbound (EulerOS-SA-2025-2218)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.7CVSS6.7AI score0.0019EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/10/11 12:0 a.m.6 views

EulerOS 2.0 SP11 : unbound (EulerOS-SA-2025-2250)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet...

8.7CVSS6.5AI score0.0019EPSS
SaveExploits0References2
Rows per page
Query Builder