CVE-2019-13951

The setipv4 function in zscanrfc1035.rl in gdnsd 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv4 address in zone data...

CVE-2019-13951

The setipv4 function in zscanrfc1035.rl in gdnsd 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv4 address in zone data...

CVE-2019-13951

CVE-2019-13951 affects gdnsd 3.x up to before 3.2.1, where the set_ipv4() function in zscan_rfc1035.rl allows a stack-based buffer overflow when processing zone data containing a long/malformed IPv4 address. Multiple vendor advisories (Red Hat, Ubuntu, Debian, OSV, NVD, CVE List) reference the sa...

PT-2019-13491

Name of the Vulnerable Software and Affected Versions gdnsd versions prior to 2.4.3 gdnsd versions 3.x prior to 3.2.1 Description The issue is related to a stack-based buffer overflow in the set ipv6 function, which can be triggered by a long and malformed IPv6 address in zone data. Recommendatio...

CVE-2019-13951: Out-of-bounds Write

The setipv4 function in zscanrfc1035.rl in gdnsd 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv4 address in zone data...

July 16, 2019—KB4507437 (Preview of Monthly Rollup)

None None...

July 16, 2019—KB4507451 (Preview of Monthly Rollup)

None None...

July 16, 2019—KB4507467 (OS Build 15063.1955)

None None...

July 16, 2019—KB4507465 (OS Build 16299.1296 )

None None...

July 16, 2019—KB4507463 (Preview of Monthly Rollup)

None None...

CVE-2019-11268

Cloud Foundry UAA version prior to 73.3.0, contain endpoints that contains improper escaping. An authenticated malicious user with basic read privileges for one identity zone can extend those reading privileges to all other identity zones and obtain private information on users, clients, and grou...

CVE-2019-11268 UAA SQL Identity Zone Vulnerability

Cloud Foundry UAA version prior to 73.3.0, contain endpoints that contains improper escaping. An authenticated malicious user with basic read privileges for one identity zone can extend those reading privileges to all other identity zones and obtain private information on users, clients, and grou...

Debian DLA-1843-1 : pdns security update

Two vulnerabilities have been discovered in pdns, an authoritative DNS server which may result in denial of service via malformed zone records and excessive NOTIFY packets in a master/slave setup. CVE-2019-10162 An issue has been found in PowerDNS Authoritative Server allowing an authorized user ...

Amazon Linux 2 : bind (ALAS-2019-1231)

A flaw was found in the way bind implemented tunable which limited simultaneous TCP client connections. A remote attacker could use this flaw to exhaust the pool of file descriptors available to named, potentially affecting network connections and the management of files such as log files or zone...

DEBIAN-CVE-2019-13072

Stored XSS in the Filters page Name field in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page...

PT-2019-12217

Name of the Vulnerable Software and Affected Versions Cloud Foundry UAA versions prior to 73.3.0 Description The issue concerns improper escaping in certain endpoints, allowing an authenticated malicious user with basic read privileges for one identity zone to extend those privileges to all other...

CVE-2019-11268: UAA SQL Identity Zone Vulnerability | Cloud Foundry

Severity Medium Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions Severity is medium unless otherwise noted. UAA Release OSS is vulnerable prior to v73.3.0 Description UAA version prior to 73.3.0, contain endpoints that contains improper escaping. An authenticated...

PowerDNS Authoritative Server NOTIFY Packets DoS Vulnerability (2019-05)

PowerDNS Authoritative Server is prone to a denial of service DoS via NOTIFY packets. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PowerDNS Authoritative Server Crafted Zone Records DoS Vulnerability (2019-04)

PowerDNS Authoritative Server is prone to a denial of service DoS via crafted zone records. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Debian DSA-4470-1 : pdns - security update

Two vulnerabilities have been discovered in pdns, an authoritative DNS server which may result in denial of service via malformed zone records and excessive NOTIFY packets in a master/slave setup. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...