12531 matches found
UBUNTU-CVE-2022-20470
In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2022-3080 affecting package bind for versions less than 9.16.33-1
CVE-2022-3080 affecting package bind for versions less than 9.16.33-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-38178 affecting package bind for versions less than 9.16.33-1
CVE-2022-38178 affecting package bind for versions less than 9.16.33-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-38177 affecting package bind for versions less than 9.16.33-1
CVE-2022-38177 affecting package bind for versions less than 9.16.33-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-2795 affecting package bind for versions less than 9.16.33-1
CVE-2022-2795 affecting package bind for versions less than 9.16.33-1. An upgraded version of the package is available that resolves this issue...
Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2022-2788)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-45518
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/SetIpBind...
PT-2022-27560 · Tenda · Tenda W30E
Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the page parameter at the "/goform/SetIpBind" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, consider disabling access to the...
EulerOS 2.0 SP8 : bind (EulerOS-SA-2022-2788)
According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively...
Tenda W30E 缓冲区错误漏洞
Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the page parameter via /goform/SetIpBind...
Security Bulletin: Vulnerability in Bind (CVE-2021-25219) affects Power HMC
Summary BIND is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE Vulnerability Details CVEID:CVE-2021-25219 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by a flaw in response processing. By abusing a lame cache, an attacker could exploit th...
Tenda TX9 Pro 缓冲区错误漏洞
The Tenda TX9 Pro is a dual-band Wi-Fi 6 router from Tenda China. A security vulnerability exists in Tenda TX9 Pro firmware version v22.03.02.10, which stems from a list parameter in its /goform/SetIpMacBind component that allows an attacker to achieve a stack overflow...
PT-2022-27472 · Tenda · Tenda Tx9 Pro
Name of the Vulnerable Software and Affected Versions: Tenda TX9 Pro version 22.03.02.10 Description: A stack overflow issue was discovered via the list parameter at the "/goform/SetIpMacBind" API endpoint. This issue affects the Tenda TX9 Pro router. Recommendations: For Tenda TX9 Pro version...
USN-5747-1 bind9 vulnerabilities
It was discovered that Bind incorrectly handled large query name when using lightweight resolver protocol. A remote attacker could use this issue to consume resources, leading to a denial of service. CVE-2016-2775 It was discovered that Bind incorrectly handled large zone data size received via...
Ubuntu 16.04 ESM : Bind vulnerabilities (USN-5747-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5747-1 advisory. It was discovered that Bind incorrectly handled large query name when using lightweight resolver protocol. A remote attacker could use this issue to...
CVE-2022-24190
The /device/acceptBind end-point for Ourphoto App version 1.4.1 does not require authentication or authorization. The usertoken header is not implemented or present on this end-point. An attacker can send a request to bind their account to any users picture frame, then send a POST request to acce...
Authentication flaw
The /device/acceptBind end-point for Ourphoto App version 1.4.1 does not require authentication or authorization. The usertoken header is not implemented or present on this end-point. An attacker can send a request to bind their account to any users picture frame, then send a POST request to acce...
Security Bulletin: ISC BIND on IBM i is vulnerable to denial of service due to memory leaks and a flaw in resolver code (CVE-2022-2795, CVE-2022-38177, CVE-2022-38178)
Summary ISC BIND on IBM i is vulnerable to a denial of service attack due to memory leaks in the DNSSEC verification code and a flaw in resolver code to degrade performance as described in the vulnerability details section. IBM i has addressed the vulnerabilities in ISC BIND with a fix as describ...
F5 Networks BIG-IP : BIND vulnerability (K11742512)
The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K11742512 advisory. - By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's...