993 matches found
EUVD-2012-1219
Malware in sbrugna...
EUVD-2010-0321
Malware in sbrugna...
EUVD-2016-1340
Malware in sbrugna...
EUVD-2021-10152
Malware in sbrugna...
EUVD-2010-4417
Malware in sbrugna...
EUVD-2022-37022
Malicious code in bioql PyPI...
EUVD-2022-37021
Malicious code in bioql PyPI...
EUVD-2023-30258
Malicious code in bioql PyPI...
EUVD-2022-36049
Malicious code in bioql PyPI...
EUVD-2023-2058
Malicious code in bioql PyPI...
GO-2025-3942 CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns
CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns...
Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.1.2
Red Hat OpenShift Service Mesh 3.1.2 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift Service Mesh 3.1....
Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.0.5
Red Hat OpenShift Service Mesh 3.0.5 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift Service Mesh 3.0....
Envoy: Race condition in Dynamic Forward Proxy leads to use-after-free and segmentation faults
Summary A use-after-free UAF vulnerability in Envoy's DNS cache causes abnormal process termination. Envoy may reallocate memory when processing a pending DNS resolution, causing list iterator to reference freed memory. Details The vulnerability exists in Envoy's Dynamic Forward Proxy...
AZL-67097 CVE-2025-58063 affecting package coredns for versions less than 1.11.4-10
CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for D...
CVE-2025-58063
CoreDNS TTL confusion vulnerability (CVE-2025-58063) affects the etcd plugin: lease IDs (64-bit) are cast to uint32 and used as TTLs, enabling DNS cache pinning and denial of service. Affected: CoreDNS versions prior to 1.12.4 (from 1.2.0 up to
CVE-2025-58063
CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for D...
SUSE CVE-2025-54588
Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. Versions 1.34.0 through 1.34.4 and 1.35.0 contain a use-after-free UAF vulnerability in the DNS cache, causing abnormal process termination. The vulnerability is in Envoy's Dynamic...
BIT-ENVOY-2025-54588 Envoy: Race condition in Dynamic Forward Proxy leads to use-after-free and segmentation faults
Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. Versions 1.34.0 through 1.34.4 and 1.35.0 contain a use-after-free UAF vulnerability in the DNS cache, causing abnormal process termination. The vulnerability is in Envoy's Dynamic...
PT-2025-36580
Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. Versions 1.34.0 through 1.34.4 and 1.35.0 contain a use-after-free UAF vulnerability in the DNS cache, causing abnormal process termination. The vulnerability is in Envoy's Dynamic...