CVE-2022-25728 Buffer Over-read in MODEM

Information disclosure in modem due to buffer over-read while processing response from DNS server...

CVE-2023-21422

Improper authorization vulnerability in semAddPublicDnsAddr in WifiSevice prior to SMR Jan-2023 Release 1 allows attackers to set custom DNS server without permission via binding WifiService...

CVE-2023-21422

Improper authorization vulnerability in semAddPublicDnsAddr in WifiSevice prior to SMR Jan-2023 Release 1 allows attackers to set custom DNS server without permission via binding WifiService...

The vulnerability of the BIND DNS server component, which allows a perpetrator to cause a service failure

The vulnerability of the BIND DNS server component is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

[SECURITY] Fedora 36 Update: bind-9.16.37-1.fc36

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

[SECURITY] [DSA 5329-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5329-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 26, 2023 https://www.debian.org/security/faq -...

CVE-2022-3094

Sending a flood of dynamic DNS updates may cause named to allocate large amounts of memory. This, in turn, may cause named to exit due to a lack of free memory. We are not aware of any cases where this has been exploited. Memory is allocated prior to the checking of access permissions ACLs and is...

Moderate: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

CVE-2022-48256

Technitium DNS Server before 10.0 allows a self-CNAME denial-of-service attack in which a CNAME loop causes an answer to contain hundreds of records...

Design/Logic Flaw

Technitium DNS Server before 10.0 allows a self-CNAME denial-of-service attack in which a CNAME loop causes an answer to contain hundreds of records...

Technitium DNS Server 安全漏洞

Technitium DNS Server is an open source authoritative and recursive DNS server from the Technitium team. It can be used to self-host DNS servers for privacy and security. A security vulnerability exists in versions of Technitium DNS Server prior to 10.0, which stems from a loop occurring in its...

PT-2023-15652 · Technitium · Technitium Dns Server

Name of the Vulnerable Software and Affected Versions: Technitium DNS Server versions prior to 10.0 Description: The issue allows a self-CNAME denial-of-service attack. This occurs when a CNAME loop causes an answer to contain hundreds of records. Recommendations: For versions prior to 10.0, upda...

CVE-2022-48256

Summary: CVE-2022-48256 affects Technitium DNS Server versions prior to 10.0. A self-CNAME loop in the DNS response can cause the answer to contain hundreds of records, leading to a denial of service (availability impact). The issue is triggered by the CNAME handling logic and results in resource...

Hughes Satellite Router Remote File Inclusion Cross Frame Scripting Vulnerability

Hughes Satellite Router contains a cross-frame scripting via remote file inclusion vulnerability that may potentially be exploited by malicious users to compromise an affected system. This vulnerability may allow an unauthenticated malicious user to misuse frames, include JS/HTML code and steal...

The vulnerability of the Windows DNS Server component of the Windows operating system allows a hacker to cause a service failure.

The vulnerability of the Windows DNS Server component of the operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the `regionalloc` function in the `util/regional.c` component of the DNS server Unbound allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the regionalloc function in the util/regional.c component of the DNS server Unbound is related to integer overflow. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

CVE-2022-30258

An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V2 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and...

CVE-2022-30258

An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V2 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and...

CVE-2022-30257

An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and...

CVE-2022-30257

An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down malicious domains. The effects of an exploit would be widespread and...