Lucene search
K

11992 matches found

OSV
OSV
•added 2021/08/18 7:15 p.m.•14 views

CVE-2021-25218

In BIND 9.16.19, 9.17.16. Also, version 9.16.19-S1 of BIND Supported Preview Edition When a vulnerable version of named receives a query under the circumstances described above, the named process will terminate due to a failed assertion check. The vulnerability affects only BIND 9 releases 9.16.1...

7.5CVSS6.6AI score0.03559EPSS
Exploits1References5
Prion
Prion
•added 2021/08/18 7:15 p.m.•15 views

Authentication flaw

In BIND 9.16.19, 9.17.16. Also, version 9.16.19-S1 of BIND Supported Preview Edition When a vulnerable version of named receives a query under the circumstances described above, the named process will terminate due to a failed assertion check. The vulnerability affects only BIND 9 releases 9.16.1...

5CVSS7.3AI score0.03559EPSS
Exploits1References5Affected Software2
Cvelist
Cvelist
•added 2021/08/18 6:20 p.m.•18 views

CVE-2021-25218 A too-strict assertion check could be triggered when responses in BIND 9.16.19 and 9.17.16 require UDP fragmentation if RRL is in use

In BIND 9.16.19, 9.17.16. Also, version 9.16.19-S1 of BIND Supported Preview Edition When a vulnerable version of named receives a query under the circumstances described above, the named process will terminate due to a failed assertion check. The vulnerability affects only BIND 9 releases 9.16.1...

7.5CVSS7.5AI score0.03559EPSS
Exploits1References5
CVE
CVE
•added 2021/08/18 6:20 p.m.•126 views

CVE-2021-25218

CVE-2021-25218 affects BIND up to 9.16.19, 9.17.16, and 9.16.19-S1 of the BIND Supported Preview Edition. A vulnerable named process terminates due to a failed assertion when handling certain queries under the described conditions. The issue is publicly documented with multiple advisories and dis...

7.5CVSS7.4AI score0.03559EPSS
Exploits1References5Affected Software1
AlpineLinux
AlpineLinux
•added 2021/08/18 6:20 p.m.•33 views

CVE-2021-25218

In BIND 9.16.19, 9.17.16. Also, version 9.16.19-S1 of BIND Supported Preview Edition When a vulnerable version of named receives a query under the circumstances described above, the named process will terminate due to a failed assertion check. The vulnerability affects only BIND 9 releases 9.16.1...

7.5CVSS7.5AI score0.03559EPSS
Exploits1
Debian CVE
Debian CVE
•added 2021/08/18 6:20 p.m.•23 views

CVE-2021-25218

In BIND 9.16.19, 9.17.16. Also, version 9.16.19-S1 of BIND Supported Preview Edition When a vulnerable version of named receives a query under the circumstances described above, the named process will terminate due to a failed assertion check. The vulnerability affects only BIND 9 releases 9.16.1...

7.5CVSS6AI score0.03559EPSS
Exploits1
CNNVD
CNNVD
•added 2021/08/18 12:0 a.m.•4 views

ISC BIND å¤„ē†é€»č¾‘é”™čÆÆę¼ę“ž

ISC BIND is a suite of open source software from ISC that implements the DNS protocol. A Processing Logic Error vulnerability exists in ISC BIND, which originates when named attempts to respond via UDP with a response larger than the currently valid interface's Maximum Transmission Unit MTU and...

7.5CVSS6.3AI score0.03559EPSS
Exploits1References9
UbuntuCve
UbuntuCve
•added 2021/08/18 12:0 a.m.•25 views

CVE-2021-25218

In BIND 9.16.19, 9.17.16. Also, version 9.16.19-S1 of BIND Supported Preview Edition When a vulnerable version of named receives a query under the circumstances described above, the named process will terminate due to a failed assertion check. The vulnerability affects only BIND 9 releases 9.16.1...

7.5CVSS6.7AI score0.03559EPSS
Exploits1References3
PyPA
PyPA
•added 2021/08/16 8:15 a.m.•5 views

PYSEC-2021-122

If remote logging is not used, the worker in the case of CeleryExecutor or the scheduler in the case of LocalExecutor runs a Flask logging server and is listening on a specific port and also binds on 0.0.0.0 by default. This logging server had no authentication and allows reading log files of DAG...

5.3CVSS7.3AI score0.04022EPSS
Exploits0References2Affected Software1
Microsoft CVE
Microsoft CVE
•added 2021/08/13 7:0 a.m.•3 views

net/nfc/llcp_sock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain type of failure of a bind call.

...

5.5CVSS7.1AI score0.00493EPSS
Exploits1
Oracle linux
Oracle linux
•added 2021/08/12 12:0 a.m.•81 views

389-ds:1.4 security and bug fix update

1.4.3.16-19 - Bump version to 1.4.3.16-19 - Resolve: Bug 1984091 - persistent search returns entries even when an error is returned by content-sync-plugin 1.4.3.16-18 - Bump version to 1.4.3.16-18 - Resolve: Bug 1983121 - CRYPT password hash with asterisk allows any bind attempt to succeed...

6.5CVSS2.3AI score0.01349EPSS
Exploits0
Tenable Nessus
Tenable Nessus
•added 2021/08/09 12:0 a.m.•30 views

EulerOS 2.0 SP9 : bind (EulerOS-SA-2021-2236)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In BIND 9.8.5 - 9.8.8, 9.9.3 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.9.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of BIND 9 Supported...

7.5CVSS7.4AI score0.11296EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
•added 2021/08/09 12:0 a.m.•60 views

EulerOS 2.0 SP9 : bind (EulerOS-SA-2021-2262)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In BIND 9.8.5 - 9.8.8, 9.9.3 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.9.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of BIND 9 Supported...

7.5CVSS7.4AI score0.11296EPSS
Exploits0References3
OpenVAS
OpenVAS
•added 2021/08/09 12:0 a.m.•16 views

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2021-2262)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.11296EPSS
Exploits0References2
OpenVAS
OpenVAS
•added 2021/08/09 12:0 a.m.•18 views

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2021-2236)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.11296EPSS
Exploits0References2
OSV
OSV
•added 2021/08/08 8:15 p.m.•1 views

DEBIAN-CVE-2021-38208

net/nfc/llcpsock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service NULL pointer dereference and BUG by making a getsockname call after a certain type of failure of a bind call...

5.5CVSS6.2AI score0.00493EPSS
Exploits1References1
OSV
OSV
•added 2021/08/08 8:15 p.m.•8 views

AZL-6592 CVE-2021-38208 affecting package kernel for versions less than 5.10.78.1-1

net/nfc/llcpsock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service NULL pointer dereference and BUG by making a getsockname call after a certain type of failure of a bind call...

5.5CVSS6.7AI score0.00493EPSS
Exploits1References1
OSV
OSV
•added 2021/08/08 8:15 p.m.•1 views

UBUNTU-CVE-2021-38208

net/nfc/llcpsock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service NULL pointer dereference and BUG by making a getsockname call after a certain type of failure of a bind call...

5.5CVSS6.7AI score0.00493EPSS
Exploits1References6
Prion
Prion
•added 2021/08/08 8:15 p.m.•24 views

Null pointer dereference

net/nfc/llcpsock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service NULL pointer dereference and BUG by making a getsockname call after a certain type of failure of a bind call...

2.1CVSS5.2AI score0.00493EPSS
Exploits1References6Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2021/07/30 5:4 a.m.•51 views

Security Bulletin: IBM QRadar Network Packet Capture is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Vulnerability Details CVEID: CVE-2021-25215 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by an assertion failure while answering queries fo...

8.1CVSS8.4AI score0.64161EPSS
Exploits3Affected Software1
Rows per page
Query Builder