Lucene search
K

11969 matches found

OSV
OSV
added 2022/10/14 11:4 a.m.3 views

OESA-2022-1993 dhcp security update

The Dynamic Host Configuration Protocol DHCP is a network management protocol used on UDP/IP networks whereby a DHCP server dynamically assigns an IP address and other network configuration parameters to each device on a network so they can communicate with other IP networks. Security Fixes: In...

7.5CVSS6.9AI score0.11296EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2022/10/14 12:0 a.m.20 views

ISC BIND DoS Vulnerability (CVE-2012-4244) - Linux

ISC BIND is prone to a denial of service DoS vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

7.8CVSS6.3AI score0.36798EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2022/10/14 12:0 a.m.9 views

ISC BIND DoS Vulnerability (CVE-2012-4244) - Windows

ISC BIND is prone to a denial of service DoS vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

7.8CVSS6.3AI score0.36798EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2022/10/13 12:0 a.m.10 views

ISC BIND DoS Vulnerability (CVE-2011-1910) - Linux

ISC BIND is prone to a denial of service DoS vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

5CVSS8.4AI score0.24638EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2022/10/13 12:0 a.m.22 views

ISC BIND DoS Vulnerability (CVE-2011-1910) - Windows

ISC BIND is prone to a denial of service DoS vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

5CVSS8.4AI score0.24638EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2022/10/12 12:0 a.m.16 views

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2022-2545)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS7.3AI score0.0325EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/10/10 12:0 a.m.31 views

EulerOS Virtualization 3.0.6.0 : bind (EulerOS-SA-2022-2545)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - BIND 9.11.0 - 9.11.36 9.12.0 - 9.16.26 9.17.0 - 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 - 9.11.36-S1 9.16.8-S1 - 9.16.26-...

6.8CVSS6.9AI score0.0325EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/10/10 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2022-2486)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.2AI score0.08001EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/10/09 12:0 a.m.24 views

EulerOS Virtualization 3.0.6.6 : bind (EulerOS-SA-2022-2486)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In BIND 9.3.0 - 9.11.35, 9.12.0 - 9.16.21, and versions 9.9.3-S1 - 9.11.35-S1 and 9.16.8-S1 - 9.16.21-S1 of BIND Supported Preview...

5.3CVSS6.3AI score0.08001EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/10/07 3:15 p.m.1 views

CVE-2022-39851

Improper access control vulnerability in CocktailBarService prior to SMR Oct-2022 Release 1 allows local attacker to bind service that require BINDREMOTEVIEWS permission...

4CVSS5.8AI score0.00075EPSS
Exploits0References2
OSV
OSV
added 2022/10/07 3:15 p.m.3 views

CVE-2022-39851

Improper access control vulnerability in CocktailBarService prior to SMR Oct-2022 Release 1 allows local attacker to bind service that require BINDREMOTEVIEWS permission...

3.3CVSS5.8AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/10/07 12:0 a.m.4 views

PT-2022-25041 · Unknown · Cocktailbarservice

Name of the Vulnerable Software and Affected Versions: CocktailBarService versions prior to SMR Oct-2022 Release 1 Description: The issue is related to an improper access control vulnerability. It allows a local attacker to bind a service that requires the BIND REMOTEVIEWS permission...

4CVSS3.8AI score0.00075EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/10/07 12:0 a.m.4 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices SMR Oct-2022 Release 1 version, which stems from an improper access control vulnerability in CocktailBarService. A...

4CVSS5AI score0.00075EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/10/06 12:0 a.m.3 views

The vulnerability of the DNS BIND server, related to insufficient validation of input data, allows attackers to execute DoS attacks.

The vulnerability of the DNS BIND server is related to insufficient validation of input data when processing the stale-answer-client-timeout parameter with a default value of 0, and the use of the CNAME record type in the cache for incoming requests. Exploiting this vulnerability allows an attack...

7.8CVSS6.5AI score0.01574EPSS
Exploits0References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/10/06 12:0 a.m.3 views

The vulnerability of the DNSSEC implementation in BIND servers allows attackers to perform a type of “denial-of-service attack”.

The vulnerability of the DNSSEC technology’s DNS BIND server stems from improper verification of the ECDSA cryptographic signature. Exploiting this vulnerability allows a malicious actor to perform a type of “denial-of-service” attack...

7.8CVSS6.6AI score0.02198EPSS
Exploits0References17Affected Software8
BDU FSTEC
BDU FSTEC
added 2022/10/06 12:0 a.m.5 views

The vulnerability of the DNS BIND server, related to improper management of internal resources, allows a perpetrator to carry out a DoS attack.

The vulnerability of the DNS BIND server is related to improper management of internal resources within the application when handling large delegations. Exploiting this vulnerability allows a malicious actor to carry out a DoS attack remotely...

7.8CVSS6.5AI score0.01574EPSS
Exploits0References18Affected Software8
BDU FSTEC
BDU FSTEC
added 2022/10/06 12:0 a.m.6 views

The vulnerability of the DNSSEC implementation on BIND servers allows attackers to perform a type of attack known as “denial-of-service attack”.

The vulnerability of the DNSSEC technology’s DNS BIND server is related to improper verification of the EdDSA cryptographic signature. Exploiting this vulnerability could allow a malicious actor to perform a denial-of-service attack remotely...

7.8CVSS6.5AI score0.0208EPSS
Exploits0References16Affected Software8
Tenable Nessus
Tenable Nessus
added 2022/10/05 12:0 a.m.77 views

Scientific Linux Security Update : bind on SL7.x i686/x86_64 (2022:6765)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:6765-1 advisory. - bind: memory leak in ECDSA DNSSEC verification code CVE-2022-38177 - bind: memory leaks in EdDSA DNSSEC verification code CVE-2022-38178 Note...

7.5CVSS7AI score0.02198EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2022/10/05 12:0 a.m.68 views

Oracle Linux 7 : bind (ELSA-2022-6765)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-6765 advisory. - Fix memory leak in ECDSA verify processing CVE-2022-38177 Tenable has extracted the preceding description block directly from the Oracle Linux securi...

7.5CVSS7AI score0.02198EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2022/10/05 12:0 a.m.64 views

RHEL 8 : bind (RHSA-2022:6780)

"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6780 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

7.5CVSS6.9AI score0.02198EPSS
Exploits0References6
Rows per page
Query Builder