Lucene search
+L

435 matches found

Tenable Nessus
Tenable Nessus
added 2019/03/22 12:00 a.m.13 views

Microsoft Software Update DNS Query Detection

Binary data 700474.prm...

7.3AI score
SaveExploits0
AlpineLinux
AlpineLinux
added 2019/03/21 8:42 p.m.95 views

CVE-2019-3871

A vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7. An insufficient validation of data coming from the user when building a HTTP request from a DNS query in the HTTP Connector of the Remote backend, allowing a remote user to cause a denial of service by makin...

8.8CVSS8.3AI score0.12632EPSS
SaveExploits1
The Hacker News
The Hacker News
added 2019/01/21 3:37 p.m.183 views

New malware found using Google Drive as its command-and-control server

Since most security tools also keep an eye on the network traffic to detect malicious IP addresses, attackers are increasingly adopting infrastructure of legitimate services in their attacks to hide their malicious activities. Cybersecurity researchers have now spotted a new malware attack campai...

7.4AI score
SaveExploits0
Veracode
Veracode
added 2019/01/15 8:56 a.m.54 views

Denial Of Service (DoS)

libvirt is vulnerable to denial of service DoS attacks. The vulnerability exists as Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service traffic amplification via a spoof...

5CVSS5.7AI score0.05028EPSS
SaveExploits0References253Affected Software2
Veracode
Veracode
added 2019/01/15 8:51 a.m.22 views

Denial Of Service (DoS)

bind-dyndb-ldap is vulnerable to denial of service DoS attacks. The vulnerability exists as the handleconnectionerror function in ldaphelper.c does not properly handle LDAP query errors, which allows remote attackers to cause a denial of service through a non-alphabet character in the base DN in ...

4.3CVSS5.7AI score0.02325EPSS
SaveExploits0References9Affected Software1
Veracode
Veracode
added 2019/01/15 8:51 a.m.33 views

Denial Of Service (DoS)

Libdns.so is vulnerable to denial of service attack. The library does not use correct regular expression validation, allowing the attack to inject a malicious DNS query causing an excessive amount of memory, or application crash...

7.8CVSS8.2AI score0.42851EPSS
SaveExploits1References17Affected Software2
Mageia
Mageia
added 2019/01/05 6:30 p.m.42 views

Updated pdns packages fix security vulnerabilities

A vulnerability was in found in PowerDNS Authoritative Server. The issue is a memory leak occurring while parsing some malformed records, due to the fact that some memory is allocated parsing a record and is not always properly released if the record is not valid. It allows an authorized user to...

7.5CVSS2.6AI score0.06041EPSS
SaveExploits0References4
Mageia
Mageia
added 2019/01/05 6:30 p.m.50 views

Updated pdns-recursor packages fix security vulnerabilities

A vulnerability was in found in PowerDNS Recursor. The issue is a memory leak occurring while parsing some malformed records, due to the fact that some memory is allocated parsing a record and is not always properly released if the record is not valid. It allows a malicious auth server to cause a...

7.5CVSS2.7AI score0.59469EPSS
SaveExploits0References6
Prion
Prion
added 2018/12/03 2:29 p.m.24 views

Out-of-bounds

An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash...

5CVSS7.4AI score0.59469EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2018/12/03 2:29 p.m.14 views

CVE-2018-16855

An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash...

7.5CVSS7.5AI score0.59469EPSS
SaveExploits0References2
OSV
OSV
added 2018/12/03 2:29 p.m.29 views

CVE-2018-16855

An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash...

7.5CVSS6.7AI score
SaveExploits0References2
OSV
OSV
added 2018/12/03 2:29 p.m.14 views

UBUNTU-CVE-2018-16855

An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash...

7.5CVSS7AI score0.59469EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2018/12/03 2:00 p.m.61 views

CVE-2018-16855

An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash...

7.5CVSS7.6AI score0.59469EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2018/12/03 2:00 p.m.68 views

CVE-2018-16855

An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash...

7.5CVSS7.6AI score0.59469EPSS
SaveExploits0
ArchLinux
ArchLinux
added 2018/11/28 12:00 a.m.54 views

[ASA-201811-21] powerdns-recursor: denial of service

Arch Linux Security Advisory ASA-201811-21 ========================================== Severity: Medium Date : 2018-11-28 CVE-ID : CVE-2018-16855 Package : powerdns-recursor Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-821 Summary ======= The package...

7.5CVSS2.4AI score0.59469EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2018/11/27 12:00 a.m.58 views

PowerDNS Recursor 4.1.x < 4.1.8 DoS Vulnerability

PowerDNS Recursor is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS7.5AI score0.59469EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2018/11/26 11:29 p.m.24 views

CVE-2018-14663

An issue has been found in PowerDNS DNSDist before 1.3.3 allowing a remote attacker to craft a DNS query with trailing data such that the addition of a record by dnsdist, for example an OPT record when adding EDNS Client Subnet, might result in the trailing data being smuggled to the backend as a...

5.9CVSS6.4AI score0.02572EPSS
SaveExploits0References2
OSV
OSV
added 2018/11/26 11:29 p.m.9 views

CVE-2018-14663

An issue has been found in PowerDNS DNSDist before 1.3.3 allowing a remote attacker to craft a DNS query with trailing data such that the addition of a record by dnsdist, for example an OPT record when adding EDNS Client Subnet, might result in the trailing data being smuggled to the backend as a...

5.9CVSS8.6AI score
SaveExploits0References2
NVD
NVD
added 2018/11/26 11:29 p.m.17 views

CVE-2018-14663

An issue has been found in PowerDNS DNSDist before 1.3.3 allowing a remote attacker to craft a DNS query with trailing data such that the addition of a record by dnsdist, for example an OPT record when adding EDNS Client Subnet, might result in the trailing data being smuggled to the backend as a...

5.9CVSS5.6AI score0.02572EPSS
SaveExploits0References2
Prion
Prion
added 2018/11/26 11:29 p.m.19 views

Design/Logic Flaw

An issue has been found in PowerDNS DNSDist before 1.3.3 allowing a remote attacker to craft a DNS query with trailing data such that the addition of a record by dnsdist, for example an OPT record when adding EDNS Client Subnet, might result in the trailing data being smuggled to the backend as a...

4.3CVSS5.6AI score0.02572EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder