CVE-2007-2187

Stack-based buffer overflow in eXtremail 2.1.1 and earlier allows remote attackers to execute arbitrary code via a long DNS response. NOTE: this might be related to CVE-2006-6926...

CVE-2007-2187

Stack-based buffer overflow in eXtremail 2.1.1 and earlier allows remote attackers to execute arbitrary code via a long DNS response. NOTE: this might be related to CVE-2006-6926...

Code injection

GlowWorm FW before 1.5.3b4 allows remote attackers to cause a denial of service kernel panic via certain DNS responses that trigger infinite recursion in TrueDNS packet parsing, as originally observed with certain login.yahoo.com responses...

CVE-2007-1030

Niels Provos libevent 1.2 and 1.2a allows remote attackers to cause a denial of service infinite loop via a DNS response containing a label pointer that references its own offset...

CVE-2007-1030

CVE-2007-1030 affects libevent 1.2 and 1.2a. The root cause is a DNS response containing a label pointer that references its own offset, enabling a remote attacker to trigger an endless loop in DNS label compression parsing and cause a denial of service. The description and connected records conf...

Mandrake Linux Security Advisory : avahi (MDKSA-2007:003)

The consumelabels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service infinite loop via a crafted compressed DNS response with a label that points to itself. Updated packages are patched to address this issue. %NASLMINLEVEL 70300 C Tenable...

bind named DoS

2 errors use-after-free and type ANY response parsing on response parsing of DNSSEC request...

[ MDKSA-2007:003 ] - Updated avahi packages fix DoS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:003 http://www.mandriva.com/security/ Package : avahi Date : January 8, 2007 Affected: 2007.0 Problem Description: The consumelabels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attacker...

Avahi DNS response DoS

Malcrafted DNS response causes endless loop...

CVE-2006-6870

The consumelabels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service infinite loop via a crafted compressed DNS response with a label that points to itself...

CVE-2006-6870

The consumelabels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service infinite loop via a crafted compressed DNS response with a label that points to itself...

CVE-2006-6870

The consumelabels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service infinite loop via a crafted compressed DNS response with a label that points to itself...

CVE-2006-6870

The consumelabels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service infinite loop via a crafted compressed DNS response with a label that points to itself...

CVE-2006-5781

Stack-based buffer overflow in the handshake function in iodine 0.3.2 allows remote attackers to execute arbitrary code via a crafted DNS response...

CVE-2006-5781

Stack-based buffer overflow in the handshake function in iodine 0.3.2 allows remote attackers to execute arbitrary code via a crafted DNS response...

CVE-2006-5781

The CVE-2006-5781 entry reports a stack-based buffer overflow in the handshake function of iodine 0.3.2 , enabling remote attackers to execute arbitrary code via a crafted DNS response. This is a network-based vulnerability with a base score 7.5 (HIGH) and no authentication required, affecting th...

iodine client 0.3.2 buffer overflow

hi, iodine client 0.3.2, available at http://code.kryo.se/iodine/ , suffers from a stack-based buffer overflow vulnerability which could result in the execution of arbitrary code. A specially crafted dns response sent through an UDP packet can be used to exploit this issue. cheers -p...

DeleGate DNS Response Message DoS

The remote host is running Delegate, a multi-application proxy. The remote version of this software is vulnerable to a denial of service when processing invalid DNS responses. An attacker may exploit this flaw to disable this service remotely. To exploit this flaw, an attacker would need to be ab...

Moderate: Red Hat Security Advisory: squid security update

An updated squid package that fixes a denial of service issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a full-featured Web proxy cache. A bug was found in the way Squid handles...

Moderate: Red Hat Security Advisory: squid security update

Updated squid packages that fix a denial of service issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team Squid is a full-featured Web proxy cache. A bug was found in the way Squid handles FQDN lookups. It was possible to cra...