Lucene search
+L

12408 matches found

RedHat Linux
RedHat Linux
added 2025/11/05 12:1 p.m.13 views

bind: Cache poisoning due to weak PRNG

A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...

8.6CVSS6.1AI score0.00464EPSS
SaveExploits0References4
OSV
OSV
added 2025/11/05 9:0 a.m.8 views

UBUNTU-CVE-2025-52565

runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and 1.4.0-rc.1 through 1.4.0-rc.2, due to insufficient checks when bind-mounting /dev/pts/$n to /dev/console inside the container, an attacker can...

8.4CVSS6.6AI score0.00565EPSS
SaveExploits1References4
OSV
OSV
added 2025/11/05 9:0 a.m.5 views

UBUNTU-CVE-2025-31133

runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficient verification that the source of the bind-mount i.e., the container's /dev/null was...

7.8CVSS6.8AI score0.00841EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.7 views

Amazon Linux 2 : bind, --advisory ALAS2-2025-3054 (ALAS-2025-3054)

The version of bind installed on the remote host is prior to 9.11.4-26.P2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3054 advisory. Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This...

7.5CVSS6.3AI score0.11203EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.2 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988904)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988904 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Bail from dwc3gadgetexit if dwc-gadget is NULL There exists a possible scenari...

5.5CVSS5AI score0.00222EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2025/11/05 12:0 a.m.13 views

Important: bind9.16 security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

8.6CVSS6.8AI score0.00665EPSS
SaveExploits1References6
Amazon
Amazon
added 2025/11/05 12:0 a.m.5 views

Important: bind

Issue Overview: Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1...

7.5CVSS6.9AI score0.11203EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/11/05 12:0 a.m.11 views

PT-2025-45166

Name of the Vulnerable Software and Affected Versions Youki versions 0.5.6 and below Description Youki is a container runtime written in Rust. Insufficient initial validation of the /dev/null source allows for container escape when bind mounting the container's /dev/null as a file mask. This occu...

10CVSS6.6AI score0.00242EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.4 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989148)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989148 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: vop: fix possible null-ptr-deref in vopbind It will cause null-ptr-deref in...

5.5CVSS5.9AI score0.0027EPSS
SaveExploits0References4
OSV
OSV
added 2025/11/05 12:0 a.m.9 views

ALSA-2025:19793 Important: bind9.16 security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

8.6CVSS6.8AI score0.00665EPSS
SaveExploits1References6
OSV
OSV
added 2025/11/05 12:0 a.m.6 views

ALSA-2025:19835 Important: bind security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

8.6CVSS6.8AI score0.00665EPSS
SaveExploits1References4
Amazon
Amazon
added 2025/11/05 12:0 a.m.10 views

Important: bind

Issue Overview: Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12,...

8.6CVSS5.8AI score0.11203EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.4 views

RHEL 8 : bind9.16 (RHSA-2025:19793)

"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:19793 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

8.6CVSS6.6AI score0.00665EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.4 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989211)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989211 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: fix possible use-after-free in smsc75xxbind The commit 46a8b29c6306 net: usb: fix memor...

7.8CVSS5.8AI score0.00228EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2025/11/05 12:0 a.m.7 views

Important: bind security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

8.6CVSS6.8AI score0.00665EPSS
SaveExploits1References4
Ubuntu
Ubuntu
added 2025/11/04 3:36 p.m.14 views

USN-7851-1: runC vulnerabilities

Lei Wang and Li Fubang discovered that runC incorrectly handled masked paths. An attacker could possibly replace a container's /dev/null with a symlink to some other procfs file and possibly escape a container. CVE-2025-31133 Lei Wang and Li Fubang discovered that runC incorrectly handled the...

8.4CVSS7.3AI score0.00841EPSS
SaveExploits4
Veracode
Veracode
added 2025/11/04 9:47 a.m.11 views

Information Disclosure

github.com/containers/podman is vulnerable to information disclosure. The vulnerability is due to data written to RUN --mount=type=bind mounts during the Podman build not being discarded, which allows an attacker to access files created within the container from the host system’s temporary build...

7.4CVSS6.3AI score0.00596EPSS
SaveExploits0References17Affected Software2
Oracle linux
Oracle linux
added 2025/11/04 12:0 a.m.20 views

sssd security update

2.9.4-5.0.2.3 - Missing ntohs to service port Orabug: 37389651 - Restore default debug level for ssscache Orabug: 32810448 2.9.4-5.3 - Resolves: RHEL-112455 - p11child currently has an infinite timeout rhel-8.10.z - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration...

8.8CVSS7.2AI score0.00756EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.7 views

PT-2025-45350

Name of the Vulnerable Software and Affected Versions runc versions 1.2.0 through 1.2.7 runc versions 1.3.0-rc.1 through 1.3.1 runc versions 1.4.0-rc.1 through 1.4.0-rc.2 Description An issue exists in the maskedPaths function where insufficient verification of the bind-mount source occurs when...

7.8CVSS7.3AI score0.00841EPSS
SaveExploits2References178
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.6 views

PT-2025-45373

Name of the Vulnerable Software and Affected Versions runc versions 1.0.0-rc3 through 1.2.7 runc versions 1.3.0-rc.1 through 1.3.2 runc versions 1.4.0-rc.1 through 1.4.0-rc.2 Description Insufficient checks when bind-mounting /dev/pts/$n to /dev/console inside a container allow an attacker to tri...

8.4CVSS6.7AI score0.00565EPSS
SaveExploits1References173
Rows per page
Query Builder