Lucene search
+L

4923 matches found

CVE
CVE
•added 2013/06/06 10:00 a.m.•106 views

CVE-2013-3919

CVE-2013-3919 affects ISC BIND where resolver.c, used by recursive resolvers, can trigger an assertion failure and named daemon exit when handling a query for a record in a malformed zone. Affected versions include BIND 9.8.5 before 9.8.5-P1, 9.9.3 before 9.9.3-P1, and 9.6-ESV-R9 before 9.6-ESV-R...

7.8CVSS4.8AI score0.0511EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2013/04/20 12:00 a.m.•38 views

Mandriva Linux Security Advisory : tor (MDVSA-2013:132)

Updated tor package fixes security vulnerabilities : Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part of an outgoing OR connection, which allows remote relays to bypass intended anonymity properties by reading this chain and then determining the se...

5.8CVSS6.1AI score0.03146EPSS
SaveExploits0References8
Mend
Mend
•added 2013/03/28 11:00 p.m.•4 views

CVE-2013-1747

channel.c in ngIRCd 20 and 20.1 allows remote attackers to cause a denial of service assertion failure and crash via a KICK command for a user who is not on the associated channel...

6.9CVSS0.02712EPSS
SaveExploits0References7
CVE
CVE
•added 2013/03/28 11:00 p.m.•72 views

CVE-2013-1747

CVE-2013-1747 affects ngIRCd 20 and 20.1; a vulnerability in channel.c allows a remote attacker to trigger an assertion failure and crash by sending a KICK for a user not on the channel (denial of service). Exploitation status is not detailed in the provided documents. Remediation: upgrade to ngI...

5CVSS6.6AI score0.02712EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
•added 2013/03/28 12:00 a.m.•3 views

PT-2013-3373

Name of the Vulnerable Software and Affected Versions ngIRCd versions 20 through 20.1 Description The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and crash, by sending a KICK command for a user who is not on the associated channel. Recommendations...

5CVSS0.02712EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/03/28 12:00 a.m.•6 views

CVE-2013-1747: Undefined Security Weakness

channel.c in ngIRCd 20 and 20.1 allows remote attackers to cause a denial of service assertion failure and crash via a KICK command for a user who is not on the associated channel...

5CVSS5.8AI score0.02712EPSS
SaveExploits0References1
Prion
Prion
•added 2013/03/14 3:10 a.m.•33 views

Out-of-bounds

The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote attackers to cause a denial of service assertion failure and daemon exit via unspecified vectors. NOTE: this issue could also trigger an out-of-bounds read, but it might not...

5CVSS7.2AI score0.03184EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
•added 2013/03/14 3:10 a.m.•51 views

CVE-2012-4460

The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote attackers to cause a denial of service assertion failure and daemon exit via unspecified vectors. NOTE: this issue could also trigger an out-of-bounds read, but it might not...

5CVSS5.9AI score0.03184EPSS
SaveExploits0References1
CVE
CVE
•added 2013/03/12 3:00 p.m.•95 views

CVE-2012-4460

The CVE-2012-4460 issue affects Apache Qpid (0.20 and earlier) in the qpid::framing::Buffer class’ serializing/deserializing functions. Affects the Buffer component, enabling remote denial of service (assertion failure and daemon exit) via unspecified vectors, with a note that it could trigger an...

5CVSS6.8AI score0.03184EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2013/03/12 3:00 p.m.•4 views

CVE-2012-4460

The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote attackers to cause a denial of service assertion failure and daemon exit via unspecified vectors. NOTE: this issue could also trigger an out-of-bounds read, but it might not...

6.9CVSS0.03184EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/03/12 12:00 a.m.•9 views

CVE-2012-4460: Improper Restriction of Operations within the Bounds of a Memory Buffer

The serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20 and earlier allow remote attackers to cause a denial of service assertion failure and daemon exit via unspecified vectors. NOTE: this issue could also trigger an out-of-bounds read, but it might not...

5CVSS5.9AI score0.03184EPSS
SaveExploits0References2
OSV
OSV
•added 2013/01/25 12:00 p.m.•11 views

DEBIAN-CVE-2012-5689

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service assertion failure and named daemon exit via a query for an AAAA record...

7.1CVSS7.1AI score0.12036EPSS
SaveExploits1References1
NVD
NVD
•added 2013/01/25 12:00 p.m.•35 views

CVE-2012-5689

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service assertion failure and named daemon exit via a query for an AAAA record...

7.1CVSS8.2AI score0.12036EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/01/25 12:00 a.m.•7 views

CVE-2012-5689: Improper Input Validation

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service assertion failure and named daemon exit via a query for an AAAA record...

7.1CVSS5.8AI score0.12036EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2013/01/24 12:00 a.m.•49 views

AIX 7.1 TL 0 : bind9 (IV11744)

An as-yet unidentified network event caused BIND 9 resolvers to cache an invalid record, subsequent queries for which could crash the resolvers with an assertion failure. Furthermore, AIX BIND 9.4.1 is affected by the following three security vulnerabilities: CVE-2010-0382 - ISC BIND...

7.6CVSS6.9AI score0.1617EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2013/01/24 12:00 a.m.•41 views

AIX 5.3 TL 12 : bind9 (IV09491)

An as-yet unidentified network event caused BIND 9 resolvers to cache an invalid record, subsequent queries for which could crash the resolvers with an assertion failure. Furthermore, AIX BIND 9.4.1 is affected by the following three security vulnerabilities: CVE-2010-0382 - ISC BIND...

7.6CVSS6.9AI score0.1617EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2013/01/24 12:00 a.m.•37 views

AIX 6.1 TL 6 : bind9 (IV11743)

An as-yet unidentified network event caused BIND 9 resolvers to cache an invalid record, subsequent queries for which could crash the resolvers with an assertion failure. Furthermore, AIX BIND 9.4.1 is affected by the following three security vulnerabilities: CVE-2010-0382 - ISC BIND...

7.6CVSS6.9AI score0.1617EPSS
SaveExploits0References6
CVE
CVE
•added 2013/01/12 2:00 a.m.•94 views

CVE-2013-0154

CVE-2013-0154 affects Xen 4.2 (and related builds) where, in the get_page_type function of xen/arch/x86/mm.c, if debugging is enabled, local PV/HVM guest admins can trigger an assertion failure and hypervisor crash via certain hypercall-related vectors. The issue is a denial of service causing hy...

1.9CVSS6AI score0.00372EPSS
SaveExploits0References11Affected Software1
Amazon
Amazon
•added 2012/12/07 12:00 a.m.•64 views

Important: bind

Issue Overview: A flaw was found in the DNS64 implementation in BIND. If a remote attacker sent a specially-crafted query to a named server, named could exit unexpectedly with an assertion failure. Note that DNS64 support is not enabled by default. CVE-2012-5688 Affected Packages: bind Issue...

7.8CVSS7.5AI score0.10896EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
•added 2012/12/06 8:25 p.m.•17 views

bind: DoS on servers using DNS64

ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted query...

7.8CVSS7.2AI score0.10896EPSS
SaveExploits1References5
Rows per page
Query Builder