CVE-2015-8262

CVE-2015-8262 affects Buffalo AirStation Extreme N600 Router WZR-600DHP2 (firmware 2.09, 2.13, 2.16). The issue is use of insufficiently random values in DNS queries: DNS TXIDs are predictable and source ports can be static, enabling a remote attacker to spoof responses and misdirect LAN clients....

CVE-2015-8263

The CVE-2015-8263 issue affects Netgear WNR1000v3 routers running firmware 1.0.2.68, where DNS queries use the same source port, enabling remote attackers to spoof responses. Root cause: use of static source ports for DNS. Impact: LAN clients can be redirected to attacker‑controlled hosts via spo...

Oracle Linux 7 : glibc (ELSA-2015-2199)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-2199 advisory. - Backport fixes for various security flaws 1209107: - Prevent heap buffer overflow in swscanf CVE-2015-1472, CVE-2015-1473, - Prevent integer overflow...

RHEL 7 : glibc (RHSA-2015:2199)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:2199 advisory. The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the Name Serv...

CVE-2007-2930

The 1 NSIDSHUFFLEONLY and 2 NSIDUSEPOOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches via unknown vectors...

CentOS 5 : bind97 (CESA-2015:1707)

"Updated bind97 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fr...

CVE-2015-7296

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M use a linear algorithm for selecting the ID value in the header of a DNS query performed on behalf of the device itself, which makes it easier for remote attackers to spoof...

Code injection

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M use a linear algorithm for selecting the ID value in the header of a DNS query performed on behalf of the device itself, which makes it easier for remote attackers to spoof...

CVE-2015-7296

Securifi Almond devices prior to AL1-R201EXP10-L304-W34 and Almond-2015 devices prior to AL2-R088M are affected by a vulnerability in DNS query ID selection: the devices use a linear algorithm to choose the ID in DNS query headers, which can allow remote attackers to spoof responses (e.g., direct...

CVE-2015-2914

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M use a fixed source-port number in outbound DNS queries performed on behalf of any device, which makes it easier for remote attackers to spoof responses by using this number f...

CVE-2015-7296

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M use a linear algorithm for selecting the ID value in the header of a DNS query performed on behalf of the device itself, which makes it easier for remote attackers to spoof...

Amazon Linux: Security Advisory (ALAS-2015-513)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

bind, caching security update

CentOS Errata and Security Advisory CESA-2015:1706 Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which...

ISC BIND Invalid TKEY Query Denial Of Service (CVE-2015-5477; CVE-2020-8625)

A denial of service vulnerability has been reported in ISC BIND DNS servers. The vulnerability is due to the way that the DNS server improperly handles invalid TKEY resource records. A remote attacker may exploit this issue by sending a specially crafted DNS query to a DNS server. Successful...

Tor2Web DNS Query Detection

Binary data 8818.prm...

MGASA-2015-0195 Updated glibc packages fix security vulnerabilities

Updated glibc package fixes security vulnerabilities: It was discovered that, under certain circumstances, glibc's getaddrinfo function would send DNS queries to random file descriptors. An attacker could potentially use this flaw to send DNS queries to unintended recipients, resulting in...

Scientific Linux Security Update : glibc on SL6.x i386/x86_64 (20150421)

A buffer overflow flaw was found in the way glibc's gethostbynamer and other related functions computed the size of a buffer when passed a misaligned buffer as input. An attacker able to make an application call any of these functions with a misaligned buffer could use this flaw to crash the...

Oracle Linux 6 : glibc (ELSA-2015-0863)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0863 advisory. - Fix invalid file descriptor reuse while sending DNS query 1207995, CVE-2013-7423. - Fix buffer overflow in gethostbynamer with misaligned buffer...

CentOS Update for glibc CESA-2015:0863 centos6

Check the version of glibc SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882172";...

OracleVM 3.3 : glibc (OVMSA-2015-0055)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix invalid file descriptor reuse while sending DNS query 1207995, CVE-2013-7423. - Fix buffer overflow in gethostbynamer with misaligned buffer 1209375, CVE-2015-1781. - Enhance nscd to detect any...