June 2014 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2

June 2014 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 Important When you install this update 2962409 from Windows Update, updates 2959146, 2973448, and 2980654 are included in the installation. The June 2014 Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2...

CVE-2019-9022

An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dnsgetrecord misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects phpparser...

Pi-hole Remote Code Execution Vulnerability

Pi-Hole is a DNS server specialized in content filtering and also functions as a DHCP server. Pi-Hole suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary commands against the server...

Information Disclosure

dnsmasq is vulnerable to information disclosure. An attacker-controlled DNS server is able to read beyond the buffer that is allocated for the packet, on a victim server, by sending malicious DNS packets to the DNS server. This vulnerability is different from CVE-2017-14491...

CVE-2019-5168

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.0214. An attacker can send a specially crafted XML cache file At 0x1e8a8 the extracted domainname value from the xml file is used as an argument to...

CVE-2019-5168

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.0214. An attacker can send a specially crafted XML cache file At 0x1e8a8 the extracted domainname value from the xml file is used as an argument to...

CVE-2019-19225

A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface Firmware EU1.03 allows an attacker to change DNS servers without being authenticated on the admin interface by submitting a crafted Forms/dns1 POST request...

Firefox enables DNS-over-HTTPS by default (with Cloudflare) for all U.S. users

If you use the Firefox web browser, here's an important update that you need to be aware of. Starting today, Mozilla is activating the DNS-over-HTTPS security feature by default for all Firefox users in the U.S. by automatically changing their DNS server configuration in the settings. That means,...

Open-Xchange: SSRF - Guard - Unchecked WKS servers

Note This is different vulnerability than HKP lookup 792953, although it does basically same thing and has same problem, these are independent implementations of key lookup and the vulnerable code isn't shared. Description When encrypting an email, one of strategies to lookup recipient's encrypti...

Israeli government’s Gov.il DNS server found vulnerable

By Sudais Asif Eitan Caspi, a security researcher has exposed certain vulnerabilities found in Israeli government websites. This is a post from HackRead.com Read the original post: Israeli government's Gov.il DNS server found vulnerable...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1926)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2019-2128)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for dnsperf FEDORA-2019-73a8737068

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RUSTSEC-2020-0001 Stack overflow when resolving additional records from MX or SRV null targets

There's a stack overflow leading to a crash and potential DOS when processing additional records for return of MX or SRV record types from the server. This is only possible when a zone is configured with a null target for MX or SRV records, i.e. '.'. Example effected zone record: text no-service...

Stack overflow when resolving additional records from MX or SRV null targets

There's a stack overflow leading to a crash and potential DOS when processing additional records for return of MX or SRV record types from the server. This is only possible when a zone is configured with a null target for MX or SRV records, i.e. '.'. Example effected zone record: text no-service...

PT-2020-17489 · Trust Dns · Trust-Dns-Server

Name of the Vulnerable Software and Affected Versions: trust-dns-server versions prior to 0.18.1 Description: An issue was discovered in the trust-dns-server crate, where DNS MX and SRV null targets are mishandled, causing stack consumption. This can lead to a stack overflow, resulting in a crash...

Security Bulletin: IBM i is affected by networking BIND vulnerabilities (CVE-2017-3142 and CVE-2017-3143)

Summary ISC BIND is vulnerable to several security vulnerabilities. IBM i has addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-3142 DESCRIPTION: ISC BIND could allow a remote attacker to bypass security restrictions, caused by an error when an attacker can send and receive...

[SECURITY] Fedora 30 Update: dnsperf-2.3.2-2.fc30

This is dnsperf, a collection of DNS server performance testing tools. For more information, see the dnsperf1 and resperf1 man pages...

[SECURITY] Fedora 30 Update: bind-9.11.13-2.fc30

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

PT-2019-6140 · Nlnet +8 · Unbound +8

Name of the Vulnerable Software and Affected Versions: Unbound versions prior to 1.9.5 Description: The issue is related to the synth cname function in the Unbound DNS server, which may lead to an assertion failure and denial of service. However, the vendor disputes that this is a vulnerability,...