Lucene search
+L

12 matches found

Tenable Nessus
Tenable Nessus
added 2026/09/18 12:00 a.m.4 views

EulerOS 2.0 SP10 : mtr (EulerOS-SA-2026-3706)

According to the versions of the mtr packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mtr is vulnerable to Out-of-bounds read vulnerability in ipinfolookup function. An attacker who can influence the TXT response used for AS lookups ca...

5.1CVSS0.00304EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/09/04 12:00 a.m.5 views

The vulnerability of the dn_expand() function in the Exim mail server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the dnexpand function in the Exim mail server is related to errors in the representation of certain functions. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS5.7AI score0.00362EPSS
SaveExploits0References10Affected Software3
RedhatCVE
RedhatCVE
added 2026/05/05 3:09 p.m.16 views

CVE-2026-40684

A flaw was found in Exim, specifically on systems utilizing musl libc. A remote attacker can exploit this vulnerability by providing malformed DNS data within PTR records. This can lead to the mail transfer agent MTA connection instance crashing, resulting in a Denial of Service DoS for affected...

7.5CVSS6AI score0.00362EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/30 10:16 p.m.12 views

CVE-2026-40684

In Exim before 4.99.2, on systems using musl libc not glibc, an attacker can crash the connection instance when malformed DNS data is present in PTR records. This is caused by a dnexpand oddity in octal printing...

7.5CVSS0.00362EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/04/30 12:00 a.m.87 views

CVE-2026-40684

In Exim before 4.99.2, on systems using musl libc not glibc, an attacker can crash the connection instance when malformed DNS data is present in PTR records. This is caused by a dnexpand oddity in octal printing...

5.9CVSS0.00362EPSS
SaveExploits0References4
CVE
CVE
added 2026/04/30 12:00 a.m.57 views

CVE-2026-40684

In Exim before 4.99.2, on systems using musl libc (not glibc), a vulnerability can crash the connection instance when malformed DNS PTR data is present. The issue arises from a dn_expand octal printing oddity in the handling of PTR records, as described in multiple sources. Affected software/comp...

7.5CVSS5.2AI score0.00362EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/30 12:00 a.m.9 views

CVE-2026-40684

In Exim before 4.99.2, on systems using musl libc not glibc, an attacker can crash the connection instance when malformed DNS data is present in PTR records. This is caused by a dnexpand oddity in octal printing...

5.9CVSS5.8AI score0.00362EPSS
SaveExploits0References4
OSV
OSV
added 2020/02/20 4:15 a.m.9 views

UBUNTU-CVE-2014-3484

Multiple stack-based buffer overflows in the dnexpand function in network/dnexpand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to 1 have unspecified impact via an invalid name length in a DNS response or 2 cause a denial of service crash via an invalid name...

9.8CVSS7.7AI score0.02204EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2015/10/08 12:00 a.m.38 views

Oracle: Security Advisory (ELSA-2007-0674)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.03489EPSS
SaveExploits1References2
Oracle linux
Oracle linux
added 2007/07/12 12:00 a.m.36 views

Moderate: perl-Net-DNS security update

0.48-2 - Resolves: rhbz245618 - Backport patch to fix dnexpand looping issue - Backport patch to randomize ID field...

4.3CVSS1.8AI score0.02049EPSS
SaveExploits1
Oracle linux
Oracle linux
added 2007/07/12 12:00 a.m.32 views

Moderate: perl-Net-DNS security update

0.31-4.el3 - Resolves: rhbz245616 - Backport patch to fix dnexpand looping issue - Backport patch to randomize ID field - Also allow disabling of online tests...

4.3CVSS1.6AI score0.03489EPSS
SaveExploits1
CERT
CERT
added 2001/11/15 12:00 a.m.39 views

BIND memcpy not bounded in case T_SIG of rrextract()

Overview Version 8.2.2 of BIND current circa November 1999 contained a buffer overflow in the routine that converts records from network format to database format. Description Version 8.2.2 of BIND includes some checks for the correct format of a signature record in DNSSEC that previous versions...

10CVSS6.8AI score0.01456EPSS
SaveExploits0References3
Rows per page
Query Builder