CVE-2020-27638

receive.c in fastd before v21 allows denial of service assertion failure when receiving packets with an invalid type code...

CVE-2020-27638

receive.c in fastd before v21 allows denial of service assertion failure when receiving packets with an invalid type code...

CVE-2020-27638

receive.c in fastd before v21 allows denial of service assertion failure when receiving packets with an invalid type code...

CVE-2020-27638

receive.c in fastd before v21 allows denial of service assertion failure when receiving packets with an invalid type code...

PT-2020-16737

Name of the Vulnerable Software and Affected Versions fastd versions prior to 21 Description The issue allows for denial of service through an assertion failure when receiving packets with an invalid type code. Recommendations For versions prior to 21, update to version 21 or later to resolve the...

CVE-2020-27638: Reachable Assertion

receive.c in fastd before v21 allows denial of service assertion failure when receiving packets with an invalid type code...

Security update for bind (moderate)

openSUSE Security Update: Security update for bind Announcement ID: openSUSE-SU-2020:1701-1 Rating: moderate References: 1100369 1109160 1118367 1118368 1128220 1156205 1157051 1161168 1170667 1170713 1171313 1171740 1172958 1173307 1173311 1173983 1175443 1176092 1176674 906079 Cross-References:...

SUSE-SU-2020:2914-1 Security update for bind

This update for bind fixes the following issues: BIND was upgraded to version 9.16.6: Note: - bind is now more strict in regards to DNSSEC. If queries are not working, check for DNSSEC issues. For instance, if bind is used in a namserver forwarder chain, the forwarding DNS servers must support...

Scientific Linux Security Update : bind on SL6.x i386/x86_64 (20201012)

Security Fixes : - bind: truncated TSIG response can lead to an assertion failure CVE-2020-8622 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141412; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate"...

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2020-2161)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unspecified Vulnerability in Google Tensorflow SparseFillEmptyRowsGrad

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A security vulnerability exists in Tensorflow SparseFillEmptyRowsGrad versions prior to 1.15.4, 2.0.3, 2.1.2, 2.2.1, 2.3.1, and 2.3.1, which stems from an incomplete validation of the shape of i...

EulerOS 2.0 SP9 : bind (EulerOS-SA-2020-2161)

According to the version of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In BIND 9.0.0 - 9.11.21, 9.12.0 - 9.16.5, 9.17.0 - 9.17.3, also affects 9.9.3-S1 - 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on...

EulerOS 2.0 SP9 : bind (EulerOS-SA-2020-2162)

According to the version of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In BIND 9.0.0 - 9.11.21, 9.12.0 - 9.16.5, 9.17.0 - 9.17.3, also affects 9.9.3-S1 - 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on...

Oracle Linux 6 : bind (ELSA-2020-4183)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4183 advisory. 32:9.8.2-0.68.rc1.8 - Fix tsig-request verify CVE-2020-8622 Tenable has extracted the preceding description block directly from the Oracle Linux security...

bind: truncated TSIG response can lead to an assertion failure

A flaw was found in bind. An assertion failure can occur when trying to verify a truncated response to a TSIG-signed request. The highest threat from this vulnerability is to system availability...

CVE-2020-26148

mdpushblockbytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service e.g., assertion failure via a malformed Markdown document...

CVE-2020-26160

jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with string for m"aud" which is allowed by the specification. Because the type assertion fails, "" is the value of aud. This is a security problem if the JWT token is presented to a service that lac...

CVE-2020-26160: Improper Authentication

jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with string for m"aud" which is allowed by the specification. Because the type assertion fails, "" is the value of aud. This is a security problem if the JWT token is presented to a service that lac...

CVE-2020-26148

mdpushblockbytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service e.g., assertion failure via a malformed Markdown document...

PT-2020-16310

Name of the Vulnerable Software and Affected Versions md4c version 0.4.5 Description The issue allows attackers to trigger the use of uninitialized memory and cause a denial of service, such as an assertion failure, via a malformed Markdown document. This is due to a problem in the md push block...