60 matches found
EulerOS 2.0 SP8 : unbound (EulerOS-SA-2022-2808)
According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Unbound vulnerability (USN-5732-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5732-1 advisory. It was discovered that Unbound incorrectly handled delegations with a large number of non-responsive nameservers. A remote attacker could...
EulerOS 2.0 SP9 : unbound (EulerOS-SA-2022-2781)
According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the 'ghost domain names' attack. The vulnerability work...
FreeBSD : unbound -- Non-Responsive Delegation Attack (5a1c2e06-3fb7-11ed-a402-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5a1c2e06-3fb7-11ed-a402-b42e991fc52e advisory. - A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in...
CVE-2022-3204
A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The attack starts by querying a resolver for...
Hardcoded credentials
A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The attack starts by querying a resolver for...
CVE-2022-3204 NRDelegation Attack
A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The attack starts by querying a resolver for...
CVE-2022-3204
CVE-2022-3204 describes NRDelegation Attack affecting unbound. The issue allows/resource consumption via malicious delegations with many non-responsive NS records, leading to high CPU and potential DoS. Affected software is Unbound; fixes were introduced in version 1.16.3 and backported in subseq...
CVE-2022-3204
A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The attack starts by querying a resolver for...
CVE-2022-3204
A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The attack starts by querying a resolver for...
CVE-2022-3204
A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The attack starts by querying a resolver for...
unbound -- Non-Responsive Delegation Attack
A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The attack starts by querying a resolver for...
Code injection
A vulnerability has been identified in Nucleus NET All versions, Nucleus ReadyStart V3 All versions V2013.08, Nucleus Source Code Versions including affected DNS modules. The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS...
CVE-2021-27393
A vulnerability has been identified in Nucleus NET All versions, Nucleus ReadyStart V3 All versions V2013.08, Nucleus Source Code Versions including affected DNS modules. The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS...
cURL/libcurl 7.x < 7.51.0 Multiple Vulnerabilities
Binary data 9826.prm...
FreeBSD : glibc -- gethostbyname buffer overflow (0765de84-a6c1-11e4-a0c1-c485083ca99c) (GHOST)
Robert Kratky reports : GHOST is a 'buffer overflow' bug affecting the gethostbyname and gethostbyname2 function calls in the glibc library. This vulnerability allows a remote attacker that is able to make an application call to either of these functions to execute arbitrary code with the...
glibc -- gethostbyname buffer overflow
Robert Krátký reports: GHOST is a 'buffer overflow' bug affecting the gethostbyname and gethostbyname2 function calls in the glibc library. This vulnerability allows a remote attacker that is able to make an application call to either of these functions to execute arbitrary code with the...
inetutils tftp client, DNS resolving bofs
Subject: GNU tftp client remote buffer overflows. ++++++++++++++++++++++++++++++++++++++++++++ Product: The tftp client that comes with the inetutils package. It's found on all unices I know of. ++++++++++++++++++++++++++++++++++++++++++++ Vulnerable: inetutils-1.4.2 was the only version audited...
Libxml2 - Multiple Remote Stack Buffer Overflow Vulnerabilities
Libxml2 - Multiple Remote Stack Buffer Overflow Vulnerabilities // source: https://www.securityfocus.com/bid/11526/info The 'libxml2' library is reported prone to multiple remote stack-based buffer-overflow vulnerabilities caused by insufficient boundary checks. Remote attackers may exploit these...
Buffer overflow in libc resolver
Buffer overflow in DNS resolving functions...