166 matches found
CVE-2021-23017-POC
CVE-2021-23017-POC nginxリゾルバーにセキュリティ上の問題が確認されました。これにより、DNSサーバーからのUDPパケットを偽造できる攻撃者が1バイトのメモリ上書きを引き起こし、ワーカープロセスのクラッシュやその他の潜在的な影響をもたらす可能性があります。 この問題は、設定ファイルで「resolver」ディレクティブが使用されている場合にのみnginxに影響します。さらに、攻撃が可能となるのは、攻撃者がDNSサーバーからのUDPパケットを偽造できる場合のみです。...
io.netty/netty-codec-dns: Netty: Denial of Service via Memory Leak in DNS Record Decoder with Malformed Domain Names
A flaw was found in Netty, an asynchronous network application framework. When processing malformed domain names in DNS packets, the DNS record decoder fails to release allocated memory. This vulnerability allows an unauthenticated remote attacker to incrementally leak direct memory, eventually...
EulerOS 2.0 SP11 : dnsmasq (EulerOS-SA-2026-3064)
According to the versions of the dnsmasq packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client...
zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet
Impact readcharacterstring and readstring in src/zeroconf/protocol/incoming.py sliced self.dataself.offset : self.offset + length and advanced self.offset by the declared length without checking it against self.datalen. Python's slice silently returns fewer bytes when the end index runs past the...
CVE-2026-4893
An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information...
CVE-2026-4890
A Denial of Service DoS vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet...
DNSmasq 安全漏洞
DNSmasq is a DNS configuration tool developed by Simon Kelley. DNSmasq has a security vulnerability, which stems from an issue with DNSSEC verification. This vulnerability allows remote attackers to cause denial-of-service attacks through specially crafted DNS packets...
Linux Distros Unpatched Vulnerability : CVE-2026-4893
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet...
CVE-2026-24028
CVE-2026-24028 affects dnsdist, a DNS load balancer. The issue arises when custom Lua code parses DNS packets with newDNSPacketOverlay, causing an out-of-bounds read that can crash the process and potentially disclose memory. Connected advisories confirm the vulnerability and list it among multip...
resolv: Denial of Service in resolv gem
A denial of service flaw was found in resolv ruby gem. This flaw allows an attacker to craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses this packet, the name decompression process consumes a large amount of CPU resources, as the library does...
EUVD-2016-5088
Malware in sbrugna...
EUVD-2019-5688
Malware in sbrugna...
EUVD-2006-2241
Malware in sbrugna...
EUVD-2002-2076
Malware in sbrugna...
EUVD-2018-11217
Malware in sbrugna...
EUVD-2019-10296
Malware in sbrugna...
EUVD-2012-3894
Malware in sbrugna...
EUVD-2013-5353
Malware in sbrugna...