[SECURITY] [DSA 5987-1] unbound security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5987-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 27, 2025 https://www.debian.org/security/faq -...

Linux Distros Unpatched Vulnerability : CVE-2025-30194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When DNSdist is configured to provide DoH via the nghttp2 provider, an attacker can cause a denial of service by crafting a DoH exchange that triggers an illega...

Linux Distros Unpatched Vulnerability : CVE-2019-10648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Robocode through 1.9.3.5 allows remote attackers to cause external service interaction DNS, as demonstrated by a query for a unique subdomain name within an...

Linux Distros Unpatched Vulnerability : CVE-2025-25188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hickory DNS is a Rust based DNS client, server, and resolver. A vulnerability present starting in version 0.8.0 and prior to versions 0.24.3 and 0.25.0-alpha.5...

Linux Distros Unpatched Vulnerability : CVE-2020-25683

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the...

Linux Distros Unpatched Vulnerability : CVE-2024-53426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-buffer-overflow vulnerability has been identified in ntopng 6.2 in the Flow::dissectMDNS function. CVE-2024-53426 Note that Nessus relies on the presence...

Linux Distros Unpatched Vulnerability : CVE-2022-22846

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dnslib package through 0.9.16 for Python does not verify that the ID value in a DNS reply matches an ID value in a query. CVE-2022-22846 Note that Nessus...

CLSA-2025-1756230743 unbound: Fix of CVE-2023-50868

CVE-2023-50868: avoid availabiluty of the remote attackers to cause a denial of service using DNSSEC...

SUSE CVE-2025-47950

CoreDNS is a DNS server that chains plugins. In versions prior to 1.12.2, a Denial of Service DoS vulnerability exists in the CoreDNS DNS-over-QUIC DoQ server implementation. The server previously created a new goroutine for every incoming QUIC stream without imposing any limits on the number of...

Linux Distros Unpatched Vulnerability : CVE-2017-11104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and...

Linux Distros Unpatched Vulnerability : CVE-2018-10920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache. CVE-2018-10920 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2017-9106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in adns before 1.5.2. adnsrrinfo mishandles a bogus datap. The general pattern for formatting integers is to sprintf into a fixed-size...

Linux Distros Unpatched Vulnerability : CVE-2003-1580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify whether a dotted quad...

CLSA-2025-1755886204 avahi: Fix of CVE-2024-52615

CVE-2024-52615: fix issue with Avahi-daemon relying on fixed source ports for wide-area DNS queries to prevent attacks with injected malicious DNS responses...

July 8, 2025—KB5062570 (OS Build 25398.1732)

None None...

CVE-2025-53577

CVE-2025-53577 : WordPress plugin Global DNS (versions up to 3.1.0) suffers an improper control of code generation leading to Remote Code Execution (RCE)/Remote Code Inclusion. The issue, described as a Code Injection vulnerability, is exploitable remotely over the network and is rated with a hig...

PT-2025-33988 · Thehp · Thehp Global Dns

Name of the Vulnerable Software and Affected Versions: thehp Global DNS versions n/a through 3.1.0 Description: Improper Control of Generation of Code 'Code Injection' in thehp Global DNS allows Remote Code Inclusion. Recommendations: Versions prior to 3.1.0 are affected...

CLSA-2025-1755512368 bind: Fix of CVE-2023-4408

CVE-2023-4408: reapply patch without dnsnamet ABI change...

Linux Distros Unpatched Vulnerability : CVE-2020-25685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:replyquery, which is the forwarded que...

Linux Distros Unpatched Vulnerability : CVE-2020-13250

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise include an HTTP API introduced in 1.2.0 and DNS introduced in 1.4.3 caching feature that was vulnerable to denial of...