ISC BIND data manipulation vulnerability

ISC BIND is a suite of open source software that implements the DNS protocol from the US company ISC. A security vulnerability exists in BIND that originates from the use of a misformatted EdDSA signature that spoofs the target resolver, causing memory to crash due to insufficient resources. The...

Slackware Linux 15.0 / current bind Multiple Vulnerabilities (SSA:2022-264-01)

The version of bind installed on the remote host is prior to 9.16.33 / 9.18.7. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-264-01 advisory. - By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the...

ISC BIND data manipulation vulnerability

ISC BIND is a suite of open source software that implements the DNS protocol from the US company ISC. A security vulnerability exists in ISC BIND versions 9.8.4 through 9.16.32, which originates from the use of a misformatted ECDSA signature that spoofs the target resolver program, causing a memo...

GSD-2022-1005600 soundwire: revisit driver bind/unbind and callbacks

soundwire: revisit driver bind/unbind and callbacks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

PT-2022-33889

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.61 Description A refcount leak was discovered in the mcde dsi bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.61,...

PT-2022-34138

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.137 Description A refcount leak was discovered in the mcde dsi bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.137...

PT-2022-34293

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.211 Description A refcount leak was discovered in the mcde dsi bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.211,...

GSD-2022-1005250 soundwire: revisit driver bind/unbind and callbacks

soundwire: revisit driver bind/unbind and callbacks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

PT-2022-33550 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.3 through v5.19.1 Description: A refcount leak was discovered in the mcde dsi bind function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.3 through...

PT-2022-4939 · Isc +10 · Bind +10

Name of the Vulnerable Software and Affected Versions: BIND versions affected versions not specified Description: The issue is related to a flaw in the resolver code, allowing an attacker to cause the named service to crash by sending specific queries. This can lead to a denial of service DoS...

PT-2022-4937 · Isc +12 · Bind +12

Name of the Vulnerable Software and Affected Versions: BIND versions prior to the fixed version Description: The issue is related to a flaw in the DNSSEC implementation of the BIND DNS server, specifically with the incorrect verification of the EdDSA cryptographic signature. This can be exploited...

PT-2022-4936

Name of the Vulnerable Software and Affected Versions BIND versions prior to the fixed version Description The issue is related to a memory leak in the DNSSEC code for the ECDSA algorithm. By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigge...

ISC BIND input validation error vulnerability

ISC BIND is a set of open source software from ISC that implements the DNS protocol. ISC BIND is vulnerable to an input validation error, which could be exploited by an attacker to cause a query to the wrong server, returning an error message to the client...

TIBCO JasperReports Server 8.0.2 Community Edition Code Execution

Advisory ID: SYSS-2022-041 Product: JasperReports Server Manufacturer: TIBCO Software Inc. Tested Versions: 8.0.2 Community Edition Vulnerability Type: CWE-502: Deserialization of Untrusted Data Risk Level: High Solution Status: Fixed Manufacturer Notification: 2022-06-10 Solution Date: 2022-08-1...

Windows shellcode stage, Bind TCP Stager (RC4 Stage Encryption, Metasm)

Custom shellcode stage. Connect back to the attacker Module Options msf use payload/windows/x64/custom/bindtcprc4 msf payloadbindtcprc4 show actions ...actions... msf payloadbindtcprc4 set ACTION msf payloadbindtcprc4 show options ...show and set options... msf payloadbindtcprc4 run -- coding:...

Windows shellcode stage, Windows x64 Bind TCP Stager

Custom shellcode stage. Listen for a connection Windows x64 Module Options msf use payload/windows/x64/custom/bindtcp msf payloadbindtcp show actions ...actions... msf payloadbindtcp set ACTION msf payloadbindtcp show options ...show and set options... msf payloadbindtcp run This module requires...

Windows shellcode stage, Bind TCP Stager with UUID Support (Windows x64)

Custom shellcode stage. Listen for a connection with UUID Support Windows x64 Module Options msf use payload/windows/x64/custom/bindtcpuuid msf payloadbindtcpuuid show actions ...actions... msf payloadbindtcpuuid set ACTION msf payloadbindtcpuuid show options ...show and set options... msf...

Windows shellcode stage, Windows x86 Bind Named Pipe Stager

Custom shellcode stage. Listen for a pipe connection Windows x86 Module Options msf use payload/windows/custom/bindnamedpipe msf payloadbindnamedpipe show actions ...actions... msf payloadbindnamedpipe set ACTION msf payloadbindnamedpipe show options ...show and set options... msf...

Windows shellcode stage, Bind TCP Stager (No NX or Win7)

Custom shellcode stage. Listen for a connection No NX Module Options msf use payload/windows/custom/bindnonxtcp msf payloadbindnonxtcp show actions ...actions... msf payloadbindnonxtcp set ACTION msf payloadbindnonxtcp show options ...show and set options... msf payloadbindnonxtcp run This module...

Windows shellcode stage, Windows x64 IPv6 Bind TCP Stager with UUID Support

Custom shellcode stage. Listen for an IPv6 connection with UUID Support Windows x64 Module Options msf use payload/windows/x64/custom/bindipv6tcpuuid msf payloadbindipv6tcpuuid show actions ...actions... msf payloadbindipv6tcpuuid set ACTION msf payloadbindipv6tcpuuid show options ...show and set...