Lucene search
+L

162 matches found

Tenable Nessus
Tenable Nessus
•added 2016/09/29 12:00 a.m.•36 views

Amazon Linux AMI : bind (ALAS-2016-751)

A denial of service flaw was found in the way BIND constructed a response to a query that met certain criteria. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS request packet. C Tenable Network Security, Inc. The...

7.8CVSS7.3AI score0.89482EPSS
SaveExploits7References2
Tenable Nessus
Tenable Nessus
•added 2016/09/29 12:00 a.m.•28 views

Scientific Linux Security Update : bind on SL5.x, SL6.x, SL7.x i386/x86_64 (20160928)

Security Fixes : - A denial of service flaw was found in the way BIND constructed a response to a query that met certain criteria. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS request packet. CVE-2016-2776 %NASLMINLEVE...

7.8CVSS7.3AI score0.89482EPSS
SaveExploits7References2
RedHat Linux
RedHat Linux
•added 2016/09/28 11:20 a.m.•26 views

bind: assertion failure in buffer.c while building responses to a specifically constructed request

A denial of service flaw was found in the way BIND constructed a response to a query that met certain criteria. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS request packet...

7.8CVSS7.1AI score0.89482EPSS
SaveExploits7References5
Amazon
Amazon
•added 2016/09/28 12:00 a.m.•59 views

Important: bind

Issue Overview: A denial of service flaw was found in the way BIND constructed a response to a query that met certain criteria. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS request packet. Affected Packages: bind Issue...

7.8CVSS7.8AI score0.89482EPSS
SaveExploits7
Tenable Nessus
Tenable Nessus
•added 2016/06/07 12:00 a.m.•12 views

Malware DNS Request Detected

Binary data 7207.pasl...

7.3AI score
SaveExploits0
seebug.org
seebug.org
•added 2016/02/17 12:00 a.m.•262 views

glibc getaddrinfo 栈缓冲区溢出漏洞(CVE-2015-7547)

漏洞概要 Glibc是GNU发布的LIBC库的C运行库,Glibc是Linux系统中最底层的API,基本其它任何运行库都会依赖于Glibc。Glibc除了封装Linux操作系统所提供的系统服务外,还提供了其它的必要服务的实现。由于 Glibc 几乎包含所有的 UNIX 通行的标准,可以说是操作系统重要支撑库。 Glibc中的 DNS...

6.8CVSS8.3AI score0.90987EPSS
SaveExploits17
RedHat Linux
RedHat Linux
•added 2016/01/28 1:27 p.m.•22 views

bind: TKEY query handling flaw leading to denial of service

A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named functioning as an authoritative DNS server or a DNS resolver exit unexpectedly with an assertion failure via a specially crafted DNS request packet...

7.8CVSS6.8AI score0.91284EPSS
SaveExploits13References6
Tenable Nessus
Tenable Nessus
•added 2015/12/18 12:00 a.m.•32 views

GLSA-201512-01 : Dnsmasq: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201512-01 Dnsmasq: Denial of Service An out-of-bounds read vulnerability has been found in the tcprequest function in Dnsmasq. Impact : A remote attacker could send a specially crafted DNS request, possibly resulting in a Denial o...

6.4CVSS7.1AI score0.04425EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2015/09/18 12:00 a.m.•65 views

F5 BIG-IP - BIND vulnerability CVE-2015-5477

The remote host is missing a security patch. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if description...

7.8CVSS7AI score0.91284EPSS
SaveExploits13References1
OpenVAS
OpenVAS
•added 2015/09/18 12:00 a.m.•55 views

F5 BIG-IP - BIND vulnerability CVE-2015-5986

The remote host is missing a security patch. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if description...

7.1CVSS7.6AI score0.26071EPSS
SaveExploits0References1
OSV
OSV
•added 2015/05/08 2:59 p.m.•9 views

CVE-2015-3294

The tcprequest function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setupreply function, which allows remote attackers to read process memory and cause a denial of service out-of-bounds read and crash via a malformed DNS request...

9AI score
SaveExploits0References11
NVD
NVD
•added 2015/05/08 2:59 p.m.•17 views

CVE-2015-3294

The tcprequest function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setupreply function, which allows remote attackers to read process memory and cause a denial of service out-of-bounds read and crash via a malformed DNS request...

6.4CVSS6.3AI score0.04425EPSS
SaveExploits1References11
Prion
Prion
•added 2015/05/08 2:59 p.m.•43 views

Out-of-bounds

The tcprequest function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setupreply function, which allows remote attackers to read process memory and cause a denial of service out-of-bounds read and crash via a malformed DNS request...

6.4CVSS6.8AI score0.04425EPSS
SaveExploits1References11Affected Software2
Debian CVE
Debian CVE
•added 2015/05/08 2:00 p.m.•60 views

CVE-2015-3294

The tcprequest function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setupreply function, which allows remote attackers to read process memory and cause a denial of service out-of-bounds read and crash via a malformed DNS request...

6.4CVSS7.3AI score0.04425EPSS
SaveExploits1
Cvelist
Cvelist
•added 2015/05/08 2:00 p.m.•47 views

CVE-2015-3294

The tcprequest function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setupreply function, which allows remote attackers to read process memory and cause a denial of service out-of-bounds read and crash via a malformed DNS request...

9AI score0.04425EPSS
SaveExploits1References11
OpenVAS
OpenVAS
•added 2015/05/05 12:00 a.m.•35 views

Debian Security Advisory DSA 3251-1 (dnsmasq - security update)

Nick Sampanis discovered that dnsmasq, a small caching DNS proxy and DHCP/TFTP server, did not properly check the return value of the setupreply function called during a TCP connection, which is used then as a size argument in a function which writes data on the client OpenVAS Vulnerability Test...

6.4CVSS7.6AI score0.04425EPSS
SaveExploits1References1
OSV
OSV
•added 2015/05/05 12:00 a.m.•42 views

DSA-3251-1 dnsmasq - security update

Bulletin has no description...

6.4CVSS7.3AI score0.04425EPSS
SaveExploits1
securityvulns
securityvulns
•added 2015/05/05 12:00 a.m.•45 views

dnsmasq uninitialized memory dereference

Uninitilized memory dereference on DNS request parsing...

6.4CVSS3.6AI score0.04425EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
•added 2015/04/27 12:00 a.m.•41 views

CVE-2015-3294

The tcprequest function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setupreply function, which allows remote attackers to read process memory and cause a denial of service out-of-bounds read and crash via a malformed DNS request...

6.4CVSS6.9AI score0.04425EPSS
SaveExploits1References4
FreeBSD
FreeBSD
•added 2015/04/07 12:00 a.m.•30 views

dnsmasq -- data exposure and denial of service

Nick Sampanis reported a potential memory exposure and denial of service vulnerability against dnsmasq 2.72. The CVE entry summarizes this as: The tcprequest function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setupreply function, which allows remote attackers to...

6.4CVSS8.7AI score0.04425EPSS
SaveExploits1References2
Rows per page
Query Builder