198 matches found
GHSA-XH69-987W-HRP8 resolv vulnerable to DoS via insufficient DNS domain name length validation
A denial of service vulnerability has been discovered in the resolv gem bundled with Ruby. Details The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed doma...
resolv vulnerable to DoS via insufficient DNS domain name length validation
A denial of service vulnerability has been discovered in the resolv gem bundled with Ruby. Details The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed doma...
CVE-2025-24294
The attack vector is a potential Denial of Service DoS. The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses suc...
CVE-2025-24294
The attack vector is a potential Denial of Service DoS. The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses suc...
CVE-2025-24294
The attack vector is a potential Denial of Service DoS. The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses suc...
rubygem-resolv -- Possible denial of service
Manu reports: The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses such a packet, the name decompression process...
Possible Denial of Service in resolv gem
A denial of service vulnerability has been discovered in the resolv gem bundled with Ruby. The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain name...
CVE-2005-2316
Domain Name Relay Daemon DNRD before 2.19.1 allows remote attackers to cause a denial of service infinite recursion via a DNS packet that uses message compression in the QNAME and two pointers that point to each other circular buffer...
CVE-2025-1673
A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash denial of service or an incorrect computation...
CVE-2025-1673 Out of bounds read when calling crc16_ansi and strlen in dns_validate_msg
A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash denial of service or an incorrect computation...
CVE-2025-1673 Out of bounds read when calling crc16_ansi and strlen in dns_validate_msg
A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash denial of service or an incorrect computation...
CVE-2025-1673 Out of bounds read when calling crc16_ansi and strlen in dns_validate_msg
A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash denial of service or an incorrect computation...
CVE-2025-1673
CVE-2025-1673 affects Zephyr RTOS with a vulnerability in DNS packet handling. Multiple connected sources describe an out-of-bounds read triggered by a malicious or malformed DNS packet without a payload, potentially causing a crash (DoS) or incorrect computation. The CVE entry references an issu...
CVE-2022-25733
Denial of service in modem due to null pointer dereference while processing DNS packets...
Reachable Assertion
Avahi is vulnerable to Reachable Assertion. the vulnerability is due to a reachable assertion in the avahidnspacketappendrecord...
avahi: Reachable assertion in avahi_dns_packet_append_record
A vulnerability was found in Avahi, where a reachable assertion exists in avahidnspacketappendrecord...
OESA-2023-1812 avahi security update
Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared...
DEBIAN-CVE-2023-38469
A vulnerability was found in Avahi, where a reachable assertion exists in avahidnspacketappendrecord...
