122 matches found
Medium: bind
Issue Overview: Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12,...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: bind (UTSA-2025-990939)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990939 advisory. Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects...
Mozilla Firefox < 62.0.2
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 62.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2018-22 advisory. - A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local...
OESA-2025-2653 bind security update
Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server. Security Fixes: Under...
EUVD-2025-177408
Malicious code in orchestrate-process-cache-data-async npm...
SUSE CVE-2025-40778
Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through...
AZL-68727 CVE-2025-40778 affecting package bind for versions less than 9.16.50-3
Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through...
ALPINE-CVE-2025-40778
Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through...
CVE-2025-40778
CVE-2025-40778 affects ISC BIND caching behavior: under certain conditions the resolver accepts forged answer data, enabling cache poisoning. Affected versions include 9.11.0–9.16.50, 9.18.0–9.18.39, 9.20.0–9.20.13, 9.21.0–9.21.12, and corresponding S1/build variants. Public advisories (e.g., ALA...
CVE-2025-40778
Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through...
EUVD-2021-12321
Malware in sbrugna...
EUVD-2017-0116
Malware in sbrugna...
EUVD-2025-18557
Malicious code in bioql PyPI...
CVE-2021-25425
Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read internal cache data via exported component...
PT-2024-36600
Name of the Vulnerable Software and Affected Versions beego versions prior to 2.3.4 Description The issue concerns the use of MD5 as a hashing algorithm in beego, which is no longer considered secure due to its vulnerability to collision attacks. This vulnerability can lead to data integrity risk...
CVE-2024-7295 Hard-coded credentials used for temporary and cache data encryption
In Progress® Telerik® Report Server versions prior to 2024 Q4 10.3.24.1112, the encryption of local asset data used an older algorithm which may allow a sophisticated actor to decrypt this information...
CVE-2024-7295 Hard-coded credentials used for temporary and cache data encryption
In Progress® Telerik® Report Server versions prior to 2024 Q4 10.3.24.1112, the encryption of local asset data used an older algorithm which may allow a sophisticated actor to decrypt this information...
Improper Input Validation
Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Improper Input Validation of input data stored in the cache. An attacker can manipulate stored data and disrupt the integrity of the cache by injecting malicious input. Remediation Upgrade...
bind: bind9: Assertion failure when serving both stale cache data and authoritative zone content
A flaw was found in the bind9 package, where a client query triggers stale data and also requires local lookups may trigger a assertion failure. This issue results in a denial of service of the bind server...
