23923 matches found
PT-2026-37095
Name of the Vulnerable Software and Affected Versions CoreDNS versions prior to 1.14.3 Description CoreDNS is a DNS server that chains plugins. A denial-of-service issue exists in the DNS-over-HTTPS DoH GET path because it lacks early size validation for incoming requests. Specifically, the serve...
PT-2026-37094
Name of the Vulnerable Software and Affected Versions CoreDNS versions prior to 1.14.3 Description The DNS-over-QUIC DoQ server can be forced into unbounded goroutine and memory growth by a remote unauthenticated client. This occurs when a client opens numerous QUIC streams and sends only one byt...
PT-2026-35932
Name of the Vulnerable Software and Affected Versions CoreDNS versions prior to 1.14.3 Description Incorrect handling of TSIG Transaction Signature authentication in gRPC, QUIC, DoH DNS over HTTPS, and DoH3 transport implementations allows an unauthenticated network attacker to bypass security...
Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.3.1.7)
The version of AHV installed on the remote host is prior to 10.3.1.7. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.3.1.7 advisory. - Calling getnetbyaddr or getnetbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend for networ...
RHEL 6 : bind (RHSA-2026:11372)
"The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:11372 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named %NASLMINLEVEL...
Fedora 44 : pdns-recursor (2026-db1ef256e0)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-db1ef256e0 advisory. Update to latest upstream Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...
GNU C Library 安全漏洞
The GNU C Library is an open-source, free C-language compiler program published by the GNU community under the LGPL license. Versions of the GNU C Library 2.2 and later contain security vulnerabilities. These vulnerabilities arise when functions such as nsprintrrf, nsprintrr, and fpnquery handle...
CLSA-2026-1777321102 Fix CVE(s): CVE-2022-26923, CVE-2022-32743
SECURITY UPDATE: Samba AD DC did not enforce the Validated-DNS-Host-Name write right, allowing an unprivileged authenticated user with machine account write access e.g. SeMachineAccountPrivilege to set the dNSHostName attribute to an arbitrary value, bypassing the MS-ADTS requirement that it matc...
CVE-2026-42255
Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation...
CVE-2026-42255
Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation...
DEBIAN-CVE-2026-42254
Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data is not directly associated with a query that triggered a response...
UBUNTU-CVE-2026-42254
Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data is not directly associated with a query that triggered a response...
CVE-2026-42254
Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data is not directly associated with a query that triggered a response...
CVE-2026-42255
Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation...
CVE-2026-42255
Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation...
CVE-2026-42254
Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data is not directly associated with a query that triggered a response...
CVE-2026-42254
The CVE affects Hickory DNS hickory-recursor versions 0.1 through 0.25.2. The root cause is cross-zone poisoning caused by cached data not being directly associated with the query that triggered the response, enabling manipulation of cached responses. Impact is limited to information integrity in...
CVE-2026-42254
Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data is not directly associated with a query that triggered a response...
