Lucene search
K

65 matches found

Positive Technologies
Positive Technologies
added 2026/05/29 12:0 a.m.6 views

PT-2026-45014

Summary IsPublicIP in pkg/gotenberg/outbound.go incorrectly classifies IPv6 6to4 / NAT64 / deprecated site-local addresses as public IPs, allowing an unauthenticated attacker to reach internal destinations e.g., cloud metadata services at 169.254.169.254 via a single crafted DNS AAAA record. This...

7.5CVSS5.9AI score0.00027EPSS
Exploits1References3
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в connman

ConnMan also known as Connection Manager versions 1.30 to 1.39 have a stack-based buffer overflow issue in the uncompress function of dnsproxy.c, occurring due to the use of NAME, RDATA, or RDLENGTH fields for the A or AAAA records...

9.8CVSS7.6AI score0.00155EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:0 a.m.1 views

Azure Linux 3.0 Security Update: glibc (CVE-2023-4527)

The version of glibc installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-4527 advisory. - A flaw was found in glibc. When the getaddrinfo function is called with the AFUNSPEC address family and the...

6.5CVSS5.5AI score0.00112EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2026/01/09 11:36 a.m.5 views

CVE-2003-1132

The DNS server for Cisco Content Service Switch CSS 11000 and 11500, when prompted for a nonexistent AAAA record, responds with response code 3 NXDOMAIN or "Name Error" instead of response code 0 "No Error", which allows remote attackers to cause a denial of service inaccessible domain by forcing...

5CVSS7.3AI score0.00534EPSS
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/14 5:23 p.m.4 views

Malicious code in d1n0-exploit-aaaa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 64210508ed5694fbb8abfa75dbca12a3f6a0ebc0b653866d6fd01de23cdc5170 Importing the module starts a reverse shell --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-11-d1n0...

7.6AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/11/13 12:0 a.m.2 views

Siemens SIMATIC S7-1500 Out-of-bounds Read (CVE-2023-4527)

A flaw was found in glibc. When the getaddrinfo function is called with the AFUNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data...

6.5CVSS6.6AI score0.00112EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2012-5572

Malware in sbrugna...

7.1CVSS7.4AI score0.0381EPSS
Exploits1References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-20507

Malware in sbrugna...

9.8CVSS9.2AI score0.00155EPSS
Exploits1References9
Microsoft CVE
Microsoft CVE
added 2025/07/11 7:0 a.m.1 views

Glibc: stack read overflow in getaddrinfo in no-aaaa mode

...

6.5CVSS7AI score0.00112EPSS
Exploits1
Fedora
Fedora
added 2024/09/21 12:17 a.m.9 views

[SECURITY] Fedora 41 Update: aardvark-dns-1.12.2-2.fc41

Authoritative DNS server for A/AAAA container records Forwards other request to configured resolvers. Read more about configuration in src/backend/mod.rs...

7.5CVSS7.3AI score0.00102EPSS
Exploits1
RedHat Linux
RedHat Linux
added 2023/10/05 2:14 p.m.3 views

glibc: Stack read overflow in getaddrinfo in no-aaaa mode

A flaw was found in glibc. When the getaddrinfo function is called with the AFUNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data...

6.5CVSS6.7AI score0.00112EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2023/10/05 2:3 p.m.5 views

glibc: Stack read overflow in getaddrinfo in no-aaaa mode

A flaw was found in glibc. When the getaddrinfo function is called with the AFUNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data...

6.5CVSS6.7AI score0.00112EPSS
Exploits1References4
AlmaLinux
AlmaLinux
added 2023/10/05 12:0 a.m.102 views

Important: glibc security update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

7.8CVSS7.8AI score0.71554EPSS
Exploits26References10
OSV
OSV
added 2023/10/03 6:4 p.m.1 views

USN-6409-1 glibc vulnerabilities

It was discovered that the GNU C Library incorrectly handled the GLIBCTUNABLES environment variable. An attacker could possibly use this issue to perform a privilege escalation attack. CVE-2023-4911 It was discovered that the GNU C Library incorrectly handled certain DNS responses when the system...

7.8CVSS6.7AI score0.71554EPSS
Exploits26References3
NVD
NVD
added 2023/09/18 5:15 p.m.17 views

CVE-2023-4527

A flaw was found in glibc. When the getaddrinfo function is called with the AFUNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data...

6.5CVSS6.9AI score0.00112EPSS
Exploits1References12
OSV
OSV
added 2023/09/18 5:15 p.m.1 views

AZL-34732 CVE-2023-4527 affecting package glibc for versions less than 2.38-11

A flaw was found in glibc. When the getaddrinfo function is called with the AFUNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data...

6.5CVSS6.5AI score0.00112EPSS
Exploits1References1
OSV
OSV
added 2023/09/18 5:15 p.m.1 views

DEBIAN-CVE-2023-4527

A flaw was found in glibc. When the getaddrinfo function is called with the AFUNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data...

6.5CVSS5.7AI score0.00112EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2023/09/18 5:15 p.m.47 views

CVE-2023-4527

A flaw was found in glibc. When the getaddrinfo function is called with the AFUNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data...

6.5CVSS6.6AI score0.00112EPSS
Exploits1References2
Prion
Prion
added 2023/09/18 5:15 p.m.27 views

Design/Logic Flaw

A flaw was found in glibc. When the getaddrinfo function is called with the AFUNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data...

4CVSS6.8AI score0.00112EPSS
Exploits1References10Affected Software22
Cvelist
Cvelist
added 2023/09/18 4:32 p.m.32 views

CVE-2023-4527 Glibc: stack read overflow in getaddrinfo in no-aaaa mode

A flaw was found in glibc. When the getaddrinfo function is called with the AFUNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data...

6.5CVSS7.1AI score0.00112EPSS
Exploits1References4
Rows per page
Query Builder