28990 matches found
CVE-2025-6432
When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability was fixed in Firefox 140 and Thunderbird 140...
CVE-2025-6432
Mozilla Firefox and Thunderbird are affected by a security bypass vulnerability in the Multi-Account Containers function. When this feature is enabled, DNS requests can bypass a configured SOCKS proxy if the domain name is invalid or the proxy is non-responsive. This flaw allows a malicious actor...
CVE-2025-2962
A denial-of-service issue in the dns implemenation could cause an infinite loop...
CVE-2025-2962 Infinite loop in dns_copy_qname
A denial-of-service issue in the dns implemenation could cause an infinite loop...
CVE-2025-2962 Infinite loop in dns_copy_qname
A denial-of-service issue in the dns implemenation could cause an infinite loop...
CVE-2025-2962
CVE-2025-2962 affects Zephyr RTOS (Zephyr project)
OSV-2025-485 Use-of-uninitialized-value in pcpp::IDnsResource::decodeName
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=426843906 Crash type: Use-of-uninitialized-value Crash state: pcpp::IDnsResource::decodeName pcpp::IDnsResource::IDnsResource pcpp::DnsLayer::parseResources...
CVE-2025-6432: Exposure of Sensitive Information to an Unauthorized Actor
When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability was fixed in Firefox 140 and Thunderbird 140...
CVE-2025-2962: Loop with Unreachable Exit Condition
A denial-of-service issue in the dns implemenation could cause an infinite loop...
PT-2025-26697 · Zephyrproject Rtos · Zephyr
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A denial-of-service issue in the dns implementation could cause an infinite loop. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
Moodle 4.5.x < 4.5.5 Multiple Vulnerabilities
According to its self-reported version, the Moodle install hosted on the remote host is 4.1.x prior to 4.1.19, or 4.4.x prior to 4.4.9, or 4.5.x prior to 4.5.5, or 5.x prior to 5.0.1. It is, therefore, affected by multiple vulnerabilities : - A stricter capability check was required to restrict...
Moodle 4.1.x < 4.1.19 Multiple Vulnerabilities
According to its self-reported version, the Moodle install hosted on the remote host is 4.1.x prior to 4.1.19, or 4.4.x prior to 4.4.9, or 4.5.x prior to 4.5.5, or 5.x prior to 5.0.1. It is, therefore, affected by multiple vulnerabilities : - A stricter capability check was required to restrict...
Quantum-Resistant Domain Name System: a Comprehensive System-Level Study
The Domain Name System DNS plays a foundational role in Internet infrastructure, yet its core protocols remain vulnerable to compromise by quantum adversaries. As cryptographically relevant quantum computers become a realistic threat, ensuring DNS confidentiality, authenticity, and integrity in t...
PT-2025-26729
Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 140 Description: The issue occurs when Multi-Account Containers is enabled, allowing DNS requests to bypass a SOCKS proxy under certain conditions, such as when the domain name is invalid or the SOCKS proxy is not...
Security Vulnerabilities fixed in Firefox 140 — Mozilla
A use-after-free in FontFaceSet resulted in a potentially exploitable crash. An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. Th...
[SECURITY] [DLA 4226-1] dns-root-data DNSSEC trust anchors update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4226-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler June 23, 2025 https://wiki.debian.org/LTS -...
pcapplusplus:FuzzTargetNg: Use-of-uninitialized-value in pcpp::IDnsResource::decodeName
Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5605069339033600 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTargetNg Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
DLA-4226-1 dns-root-data - DNSSEC trust anchors update
Bulletin has no description...
Debian dla-4226 : dns-root-data - security update
The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4226 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4226-1 [email protected] https://www.debian.org/lts/security/...
