Lucene search
K

50 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux - уязвимость в qtbase-opensource-src

A issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read issue due to a crafted reply from a DNS server...

5.3CVSS6.2AI score0.00088EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.2 views

MiracleLinux 4 : dnsmasq-2.48-18.AXS4 (AXSA:2017-2307:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2017-2307:01 advisory. A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which wou...

9.8CVSS8.4AI score0.3372EPSS
Exploits6References2
AlpineLinux
AlpineLinux
added 2025/10/22 12:28 p.m.1 views

CVE-2025-11411

NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are...

7.1CVSS6.4AI score0.00068EPSS
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-9392

Malware in sbrugna...

8.3CVSS8.1AI score0.00293EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2020-25683

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the...

7.1CVSS6.6AI score0.31317EPSS
Exploits0References2
Veracode
Veracode
added 2024/07/23 7:59 a.m.10 views

Improper Response Validation

dnsjava is vulnerable to Improper Response Validation. The vulnerability is due to records in DNS replies not being checked for their relevance to the query, allowing an attacker to respond with RRs from different zones...

8.9CVSS6.6AI score0.00194EPSS
Exploits0References3Affected Software1
SUSE CVE
SUSE CVE
added 2023/05/24 1:58 a.m.2 views

SUSE CVE-2023-33285

An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server...

6.5CVSS7.2AI score0.00088EPSS
Exploits0References9
ATTACKERKB
ATTACKERKB
added 2023/05/22 3:15 a.m.2 views

CVE-2023-33285

An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server...

5.3CVSS6AI score0.00088EPSS
Exploits0References3
OSV
OSV
added 2023/05/22 3:15 a.m.3 views

DEBIAN-CVE-2023-33285

An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server...

5.3CVSS5.9AI score0.00088EPSS
Exploits0References1
OSV
OSV
added 2023/05/22 3:15 a.m.1 views

UBUNTU-CVE-2023-33285

An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server...

5.3CVSS7.2AI score0.00088EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2022/05/20 11:48 p.m.30 views

CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

7.5CVSS2AI score0.00489EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2021/02/05 12:0 a.m.55 views

EulerOS 2.0 SP9 : dnsmasq (EulerOS-SA-2021-1244)

According to the versions of the dnsmasq package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with...

8.3CVSS7.9AI score0.45359EPSS
Exploits2References8
Tenable Nessus
Tenable Nessus
added 2021/01/21 12:0 a.m.62 views

Fedora 33 : dnsmasq (2021-84440e87ba)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-84440e87ba advisory. - A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with...

8.3CVSS7.9AI score0.45359EPSS
Exploits2References8
NVD
NVD
added 2021/01/20 5:15 p.m.20 views

CVE-2020-25681

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overfl...

8.3CVSS8.3AI score0.45359EPSS
Exploits0References8
OSV
OSV
added 2021/01/20 5:15 p.m.1 views

ALPINE-CVE-2020-25681

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overfl...

8.1CVSS7.6AI score0.45359EPSS
Exploits0References1
Prion
Prion
added 2021/01/20 5:15 p.m.110 views

Heap overflow

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overfl...

8.3CVSS8.1AI score0.45359EPSS
Exploits0References7Affected Software3
Veracode
Veracode
added 2021/01/20 4:41 p.m.62 views

Buffer Overflow

dnsmasq is vulnerable to buffer overflow. An attacker may forge malicious DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overflow with arbitrary data in a heap memory segment, possibly executing code on the machine...

8.1CVSS3.9AI score0.45359EPSS
Exploits0References10Affected Software6
Veracode
Veracode
added 2021/01/20 4:41 p.m.31 views

Arbitrary Code Execution

dnsmasq is vulnerable to arbitrary code execution. A heap-based buffer overflow in rfc1035.c:extractname due to the lack of length checks, which could be abused occurs when DNSSEC is enabled and before the receiving DNS entries are validated. A remote attacker who can create valid DNS replies is...

5.9CVSS6.3AI score0.22EPSS
Exploits0References10Affected Software6
Debian CVE
Debian CVE
added 2021/01/20 4:36 p.m.45 views

CVE-2020-25681

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overfl...

8.3CVSS7.1AI score0.45359EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2021/01/20 4:36 p.m.90 views

CVE-2020-25681

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overfl...

8.3CVSS8.6AI score0.45359EPSS
Exploits0
Rows per page
Query Builder