Siemens SCALANCE W1750D, M800, S615, and RUGGEDCOM RM1224 (Update C)

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low skill level to exploit. Vendor: Siemens --------- Begin Update C Part 1 of 3 -------- Equipment: SCALANCE W1750D, M800, S615, and RUGGEDCOM RM1224 --------- End Update C Part 1 of 3 -------- Vulnerabilities: Resource...

Stack overflow

Stack-based buffer overflow in "dnsproxy.c" in connman 1.34 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted response query string passed to the "name" variable...

[SECURITY] [DSA 3956-1] connman security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3956-1 [email protected] https://www.debian.org/security/ Luciano Bello August 27, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3956-1] connman security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3956-1 [email protected] https://www.debian.org/security/ Luciano Bello August 27, 2017 https://www.debian.org/security/faq -...

Palo Alto DNS Proxy Arbitrary Code Execution Vulnerability

Palo Alto Networks PAN-OS is a suite of operating systems developed by Palo Alto Networks for its firewall appliances.DNS Proxy is one of the DNS proxies capable of resolving remote hosts using external scripts via http proxy requests. An arbitrary code execution vulnerability exists in DNS Proxy...

CVE-2017-8390

The DNS Proxy in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to execute arbitrary code via a crafted domain name...

CVE-2017-8390

The DNS Proxy in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to execute arbitrary code via a crafted domain name...

Code injection

The DNS Proxy in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to execute arbitrary code via a crafted domain name...

CVE-2017-8390

The DNS Proxy in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to execute arbitrary code via a crafted domain name...

CVE-2017-8390

The PAN-OS DNS Proxy contains a remote code execution vulnerability (CVE-2017-8390) that can be triggered by processing a specially crafted FQDN. Affected PAN-OS versions: 6.1.x prior to 6.1.18; 7.x prior to 7.0.16 (6.1.x, 7.0.x, 7.1.x, 8.x). Palo Alto Networks and CNVD indicate exploitation coul...

Palo Alto PAN-OS DNS-Proxy RCE Vulnerability

A Remote Code Execution vulnerability exists in the PAN-OS DNS Proxy. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Vulnerability in the PAN-OS DNS Proxy

A Remote Code Execution vulnerability exists in the PAN-OS DNS Proxy. This issue affects customers who have DNS Proxy enabled in PAN-OS. This issue affects both the Data and Management planes of the firewall. When DNS Proxy processes a specially crafted fully qualified domain names FQDN, it is...

Vulnerability in the PAN-OS DNS Proxy

A Remote Code Execution vulnerability exists in the PAN-OS DNS Proxy. This issue affects customers who have DNS Proxy enabled in PAN-OS. This issue affects both the Data and Management planes of the firewall. When DNS Proxy processes a specially crafted fully qualified domain names FQDN, it is...

Palo Alto Networks PAN-OS 6.1.x < 6.1.18 / 7.0.x < 7.0.17 / 7.1.x < 7.1.12 / 8.0.x < 8.0.3 Multiple Vulnerabilities

The version of Palo Alto Networks PAN-OS running on the remote host is 6.1.x prior to 6.1.18, 7.0.x prior to 7.0.17, 7.1.x prior to 7.1.12, or 8.0.x prior to 8.0.3. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists in the OpenSSL component that is...

Juniper Networks Junos OS Multiple BIND Vulnerabilities (JSA10785)

Junos OS is prone to multiple denial of service vulnerabilities in ISC BIND named. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-4739

mDNSResponder in Apple OS X before 10.12, when VMnet.framework is used, arranges for a DNS proxy to listen on all interfaces, which allows remote attackers to obtain sensitive information by sending a DNS query to an unintended interface...

CVE-2016-4739

CVE-2016-4739 – Apple mDNSResponder information disclosure : In OS X builds prior to 10.12, when VMnet.framework is used, mDNSResponder can cause a DNS proxy to listen on all interfaces, enabling remote attackers to extract sensitive information by sending a DNS query to an unintended interface. ...

CVE-2016-4739

mDNSResponder in Apple OS X before 10.12, when VMnet.framework is used, arranges for a DNS proxy to listen on all interfaces, which allows remote attackers to obtain sensitive information by sending a DNS query to an unintended interface...

Configurable DNS Proxy: foghorn

Configurable DNS Proxy foghorn is a configurable DNS proxy to allow for black-, white-, and greylisting of DNS resources. DNS is an essential utility for the functioning of internet-connected resources, and one which a careful administrator can control. The foghorn utility provides a means to add...

Juniper Networks Junos OS SRX and J-Series BIND DoS Vulnerability

Junos OS BIND on SRX-Series and J-Series is prone to a Denial of Service vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...