CVE-2015-7547

Multiple stack-based buffer overflows in the 1 senddg and 2 sendvc functions in the libresolv library in the GNU C Library aka glibc or libc6 before 2.23 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted DNS response that triggers a call to...

FreeBSD : glibc -- getaddrinfo stack-based buffer overflow (2dd7e97e-d5e8-11e5-bcbd-bc5ff45d0f28)

Fabio Olive Leite reports : A stack-based buffer overflow was found in libresolv when invoked from nssdns, allowing specially crafted DNS responses to seize control of EIP in the DNS client. The buffer overflow occurs in the functions senddg send datagram and sendvc send TCP for the NSS module...

glibc: getaddrinfo stack-based buffer overflow

A stack-based buffer overflow was found in the way the libresolv library performed dual A/AAAA DNS queries. A remote attacker could create a specially crafted DNS response which could cause libresolv to crash or, potentially, execute code with the permissions of the user running the library. Note...

Null pointer dereference

The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service invalid pointer dereference and worker process crash via a crafted UDP DNS response...

Design/Logic Flaw

Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service worker process crash or possibly have unspecified other impact via a crafted DNS response related to CNAME response processing...

CVE-2016-0742

The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service invalid pointer dereference and worker process crash via a crafted UDP DNS response...

CVE-2016-0746

CVE-2016-0746 is a use-after-free in nginx’s resolver when processing DNS CNAME responses. The issue affects nginx versions before 1.8.1 and 1.9.x before 1.9.10; exploitation could crash worker processes or yield other unspecified impacts. Remediation per connected docs: upgrade to non‑vulnerable...

CVE-2016-0746

Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service worker process crash or possibly have unspecified other impact via a crafted DNS response related to CNAME response processing...

CVE-2016-0746

Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service worker process crash or possibly have unspecified other impact via a crafted DNS response related to CNAME response processing...

CVE-2007-1030

Niels Provos libevent 1.2 and 1.2a allows remote attackers to cause a denial of service infinite loop via a DNS response containing a label pointer that references its own offset...

CVE-2015-6326

Cisco Adaptive Security Appliance ASA software 7.2 and 8.2 before 8.25.58, 8.3 and 8.4 before 8.47.29, 8.5 through 8.7 before 8.71.17, 9.0 before 9.04.37, 9.1 before 9.16.6, 9.2 before 9.24, 9.3 before 9.33.5, and 9.4 before 9.41.5 allows remote attackers to cause a denial of service device reloa...

Code injection

Cisco Adaptive Security Appliance ASA software 7.2 and 8.2 before 8.25.58, 8.3 and 8.4 before 8.47.29, 8.5 through 8.7 before 8.71.17, 9.0 before 9.04.37, 9.1 before 9.16.6, 9.2 before 9.24, 9.3 before 9.33.5, and 9.4 before 9.41.5 allows remote attackers to cause a denial of service device reloa...

Code injection

Cisco Adaptive Security Appliance ASA software 7.2 and 8.2 before 8.25.58, 8.3 and 8.4 before 8.47.29, 8.5 through 8.7 before 8.71.17, 9.0 before 9.04.37, 9.1 before 9.16.4, 9.2 before 9.24, 9.3 before 9.33.1, and 9.4 before 9.41.1 allows remote attackers to cause a denial of service device reloa...

CVE-2015-6326

Cisco Adaptive Security Appliance ASA software 7.2 and 8.2 before 8.25.58, 8.3 and 8.4 before 8.47.29, 8.5 through 8.7 before 8.71.17, 9.0 before 9.04.37, 9.1 before 9.16.6, 9.2 before 9.24, 9.3 before 9.33.5, and 9.4 before 9.41.5 allows remote attackers to cause a denial of service device reloa...

CVE-2015-6325

Cisco Adaptive Security Appliance ASA software 7.2 and 8.2 before 8.25.58, 8.3 and 8.4 before 8.47.29, 8.5 through 8.7 before 8.71.17, 9.0 before 9.04.37, 9.1 before 9.16.4, 9.2 before 9.24, 9.3 before 9.33.1, and 9.4 before 9.41.1 allows remote attackers to cause a denial of service device reloa...

CVE-2015-6326

CVE-2015-6326 affects Cisco ASA hardware/software: the DNS code misparses crafted DNS responses, enabling unauthenticated remote attackers to trigger a denial of service (device reload). Affected software includes ASA 7.2, 8.2–8.2(5.58), 8.3–8.4(7.29), 8.5–8.7(1.17), 9.0(4.37), 9.1(6.6), 9.2(4), ...

Buffer overflow

Buffer overflow in the gethostbynamer and other unspecified NSS functions in the GNU C Library aka glibc or libc6 before 2.22 allows context-dependent attackers to cause a denial of service crash or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer...

CVE-2015-1781

Buffer overflow in the gethostbynamer and other unspecified NSS functions in the GNU C Library aka glibc or libc6 before 2.22 allows context-dependent attackers to cause a denial of service crash or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer...

CVE-2015-1781

Buffer overflow in the gethostbynamer and other unspecified NSS functions in the GNU C Library aka glibc or libc6 before 2.22 allows context-dependent attackers to cause a denial of service crash or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer...

CVE-2015-1781

Buffer overflow in the gethostbynamer and other unspecified NSS functions in the GNU C Library aka glibc or libc6 before 2.22 allows context-dependent attackers to cause a denial of service crash or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer...