Lucene search
K

24 matches found

The Hacker News
The Hacker News
added 2026/04/14 2:56 p.m.3 views

Google Adds Rust-Based DNS Parser into Pixel 10 Modem to Enhance Security

Google has announced the integration of a Rust-based Domain Name System DNS parser into the modem firmware as part of its ongoing efforts to beef up the security of Pixel devices and push memory-safe code at a more foundational level. "The new Rust-based DNS parser significantly reduces our...

9.8CVSS6.3AI score0.0007EPSS
Exploits0
NVD
NVD
added 2026/03/20 4:16 a.m.1 views

CVE-2026-32945

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a Heap-based Buffer Overflowvulnerability in the DNS parser's name length handler. Thisimpacts applications using PJSIP's built-in DNS resolver, such as those configured with...

9.8CVSS0.00072EPSS
Exploits1References2
UbuntuCve
UbuntuCve
added 2026/03/20 4:16 a.m.1 views

CVE-2026-32945

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a Heap-based Buffer Overflowvulnerability in the DNS parser's name length handler. Thisimpacts applications using PJSIP's built-in DNS resolver, such as those configured with...

9.8CVSS5.9AI score0.00072EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/03/20 3:54 a.m.2 views

CVE-2026-32945 PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a Heap-based Buffer Overflowvulnerability in the DNS parser's name length handler. Thisimpacts applications using PJSIP's built-in DNS resolver, such as those configured with...

8.4CVSS5.8AI score0.00072EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2026/03/20 3:54 a.m.2 views

CVE-2026-32945

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a Heap-based Buffer Overflowvulnerability in the DNS parser's name length handler. Thisimpacts applications using PJSIP's built-in DNS resolver, such as those configured with...

9.8CVSS5.4AI score0.00072EPSS
Exploits1
OSV
OSV
added 2026/03/20 3:54 a.m.1 views

CVE-2026-32945 PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a Heap-based Buffer Overflowvulnerability in the DNS parser's name length handler. Thisimpacts applications using PJSIP's built-in DNS resolver, such as those configured with...

8.4CVSS5.9AI score0.00072EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/03/20 3:54 a.m.17 views

CVE-2026-32945 PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a Heap-based Buffer Overflowvulnerability in the DNS parser's name length handler. Thisimpacts applications using PJSIP's built-in DNS resolver, such as those configured with...

8.4CVSS0.00072EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/03/20 12:0 a.m.2 views

PT-2026-26552

Name of the Vulnerable Software and Affected Versions PJSIP versions 2.16 and below Description PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below contain a Heap-based Buffer Overflow in the DNS parser's name length handler. This impacts...

9.8CVSS5.8AI score0.00072EPSS
Exploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-5842

Malware in sbrugna...

7.8CVSS7.4AI score0.0083EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-4513

Malware in sbrugna...

7.5CVSS8.5AI score0.01117EPSS
Exploits0References13
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2014-3980

Malicious code in bioql PyPI...

5.1CVSS7.3AI score0.30666EPSS
Exploits0References35
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2017-12995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print- domain.c:nsprint. CVE-2017-12995 Note that Nessus relies on the...

9.8CVSS7AI score0.01117EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:28 a.m.1 views

SUSE CVE-2014-3597

Multiple buffer overflows in the phpparserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS servers to cause a denial of service application crash or possibly execute arbitrary code via a crafted DNS record, related to the dnsgetrecord function and the...

6.8CVSS8.2AI score0.06957EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:57 a.m.1 views

SUSE CVE-2016-7993

A bug in util-print.c:reltsprint in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM...

9.8CVSS7.6AI score0.00877EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:41 a.m.1 views

SUSE CVE-2017-12995

The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:nsprint...

7.5CVSS7.1AI score0.01117EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2019/11/01 1:3 p.m.1 views

php: memcpy with negative length via crafted DNS response

An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dnsgetrecord misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects phpparser...

7.5CVSS7.5AI score0.08561EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2017/10/30 12:0 a.m.28 views

openSUSE Security Update : tcpdump (openSUSE-2017-1205)

This update for tcpdump to version 4.9.2 fixes several issues. These security issues were fixed : - CVE-2017-11108: Prevent remote attackers to cause DoS heap-based buffer over-read and application crash via crafted packet data. The crash occured in the EXTRACT16BITS function, called from the...

9.8CVSS7.7AI score0.10465EPSS
Exploits3References92
Prion
Prion
added 2017/09/14 6:29 a.m.10 views

Code injection

The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:nsprint...

5CVSS8.2AI score0.01117EPSS
Exploits0References7Affected Software1
NVD
NVD
added 2017/09/14 6:29 a.m.9 views

CVE-2017-12995

The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:nsprint...

9.8CVSS8.4AI score0.01117EPSS
Exploits0References7
Debian CVE
Debian CVE
added 2017/09/14 6:0 a.m.21 views

CVE-2017-12995

The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:nsprint...

9.8CVSS8.6AI score0.01117EPSS
Exploits0
Rows per page
Query Builder