2106 matches found
PT-2022-2865 · Microsoft · Windows Dns Server +1
Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to insufficient access control to ports in the Windows DNS Server component, allowing a remote attacker to disclose protected information. This can lead to t...
Microsoft DNS Server 代码注入漏洞
Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft DNS Server. The following products and versions are affected:Windows Server 2019,Windows Server 2019 Server Core installation,Windows Server 2022,Windows Server 2022 Server Core...
Microsoft DNS Server 代码注入漏洞
Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft DNS Server. The following products and versions are affected:Windows Server 2019,Windows Server 2019 Server Core installation,Windows Server 2022,Windows Server 2022 Server Core...
TP-LINK TL-WR840N Buffer Overflow Vulnerability
TP-LINK TL-WR840N is a wireless router. The TP-LINK TL-WR840N was found to contain a buffer overflow via DNS server parameter overflow. An attacker could exploit this vulnerability to cause program runtime failure, system downtime, reboot, and other consequences...
Design/Logic Flaw
A vulnerability in the bailiwick checking function in Technitium DNS Server = v7.0 exists that allows specific malicious users to inject NS records of any domain even TLDs into the cache and conduct a DNS cache poisoning attack...
CVE-2021-43105
A vulnerability in the bailiwick checking function in Technitium DNS Server = v7.0 exists that allows specific malicious users to inject NS records of any domain even TLDs into the cache and conduct a DNS cache poisoning attack...
CVE-2021-43105
Technitium DNS Server vulnerabilities: A bailiwick checking function flaw in versions ≤ 7.0 allows malicious users to inject NS records of any domain (even TLDs) into the cache, enabling DNS cache poisoning. The PT-2022-11786 entry and CNNVD/CVE references corroborate this, stating the impact as ...
PT-2022-11786 · Technitium · Technitium Dns Server
Name of the Vulnerable Software and Affected Versions: Technitium DNS Server versions = 7.0 Description: A vulnerability in the bailiwick checking function exists that allows specific malicious users to inject NS records of any domain into the cache and conduct a DNS cache poisoning attack...
[SECURITY] Fedora 34 Update: bind-9.16.27-1.fc34
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...
[SECURITY] Fedora 36 Update: bind-9.16.27-1.fc36
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...
[SECURITY] Fedora 35 Update: bind-9.16.27-1.fc35
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...
CVE-2021-25220
BIND 9.11.0 - 9.11.36 9.12.0 - 9.16.26 9.17.0 - 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 - 9.11.36-S1 9.16.8-S1 - 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as th...
March 8, 2022—KB5011495 (OS Build 14393.5006) - EXPIRED
None None...
The vulnerability of the Windows DNS Server component for Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Windows DNS Server component for operating systems involves incorrect code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted request...
ROS-20220209-01
A vulnerability in the BIND DNS server is related to improper consumption of internal resources during cache processing. Exploitation of the vulnerability could allow an attacker acting remotely to cause resource exhaustion and Perform a denial-of-service DoS attack...
CVE-2022-21984
Windows DNS Server Remote Code Execution Vulnerability...
Remote code execution
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2022-21984 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2022-21984
CVE-2022-21984 is a Windows DNS Server Remote Code Execution vulnerability. The issue affects Windows DNS Server when dynamic updates are enabled, potentially allowing an attacker to take over the DNS server and execute code with elevated privileges. Mitigation in the provided documents points to...
Rocky Linux 8 : nginx:1.16 (RLSA-2021:2290)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:2290 advisory. - A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory...