Lucene search
+L

142 matches found

NVD
NVD
•added 2024/06/13 7:15 p.m.•51 views

CVE-2024-36587

Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy...

7.8CVSS0.00173EPSS
SaveExploits1References1
OSV
OSV
•added 2024/06/13 7:15 p.m.•35 views

CVE-2024-36587

Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy...

7.8CVSS6.9AI score0.00173EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2024/06/13 7:15 p.m.•60 views

UBUNTU-CVE-2024-36587

Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy...

7.8CVSS5.8AI score0.00173EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2024/06/13 7:15 p.m.•48 views

CVE-2024-36587

Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy...

7.8CVSS7.1AI score0.00173EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•27 views

DNSCrypt-proxy Security Vulnerability

DNSCrypt-proxy is a DNS proxy for the DNSCrypt project. A security vulnerability exists in DNSCrypt-proxy versions v2.0.0alpha9 through v2.1.5 that stems from improper privilege management. An attacker can exploit the vulnerability to elevate privileges to root by overwriting the binary...

7.8CVSS6.9AI score0.00173EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/06/13 12:00 a.m.•43 views

CVE-2024-36587

Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy...

0.00173EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2024/06/13 12:00 a.m.•86 views

CVE-2024-36587

Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy...

7.8CVSS7.3AI score0.00173EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2024/06/13 12:00 a.m.•25 views

PT-2024-27084 · Unknown · Dnscrypt-Proxy

Name of the Vulnerable Software and Affected Versions: DNSCrypt-proxy versions 2.0.0alpha9 through 2.1.5 Description: The issue is related to insecure permissions in DNSCrypt-proxy, allowing non-privileged attackers to escalate privileges to root. This can be achieved by overwriting the binary...

7.8CVSS7.1AI score0.00173EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
•added 2024/06/13 12:00 a.m.•12 views

CVE-2024-36587

Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy...

7.1AI score0.00173EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/13 12:00 a.m.•6 views

CVE-2024-36587: Incorrect Privilege Assignment

Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy...

7.8CVSS7.3AI score0.00173EPSS
SaveExploits1References1
CVE
CVE
•added 2024/06/13 12:00 a.m.•67 views

CVE-2024-36587

DNSCrypt-proxy (versions v2.0.0alpha9 to v2.1.5 ) is vulnerable to local privilege escalation due to insecure permissions and improper privilege management. The service incorrectly trusts the executable in the current directory during registration, enabling a binary planting attack where a non-pr...

7.8CVSS7.4AI score0.00173EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2023/07/05 12:00 a.m.•13 views

SUSE: Security Advisory (SUSE-SU-2023:2777-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.8AI score0.0458EPSS
SaveExploits0References6
OSV
OSV
•added 2023/07/04 8:39 a.m.•11 views

SUSE-SU-2023:2777-1 Security update for dnsdist

This update for dnsdist fixes the following issues: - Implements package 'dnsdist' with version 1.8.0 in SLE15. jscPED-3402 - Downstream DNS resolver configuration should be chosen by the admin - Security fix: fixes a possible record smugging with a crafted DNS query with trailing data...

8.8CVSS6.8AI score0.0458EPSS
SaveExploits0References7
OpenVAS
OpenVAS
•added 2023/06/19 12:00 a.m.•26 views

Debian: Security Advisory (DLA-3455-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.9AI score0.20891EPSS
SaveExploits8References4
Debian
Debian
•added 2023/06/16 9:31 p.m.•93 views

[SECURITY] [DLA 3455-1] golang-go.crypto security update

Debian LTS Advisory DLA-3455-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany June 16, 2023 https://wiki.debian.org/LTS Package : golang-go.crypto Version : 1:0.0git20181203.505ab14-1+deb10u1 CVE ID : CVE-2019-11840 CVE-2019-11841 CVE-2020-9283 Debian Bug : 95246...

7.5CVSS7AI score0.20891EPSS
SaveExploits8
SUSE CVE
SUSE CVE
•added 2023/02/15 4:05 a.m.•10 views

SUSE CVE-2019-25038

Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

5.3CVSS8.1AI score0.0212EPSS
SaveExploits0References7
OpenVAS
OpenVAS
•added 2022/07/31 12:00 a.m.•16 views

Fedora: Security Advisory for dnscrypt-proxy (FEDORA-2022-5ef0bd9a27)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
•added 2022/07/30 1:55 a.m.•53 views

[SECURITY] Fedora 36 Update: dnscrypt-proxy-2.1.1-5.fc36

A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2 and DNS-over-HTTP/2. Features: - DNS traffic encryption and authentication. Supports DNS-over-HTTPS DoH and DNSCrypt. - DNSSEC compatible - DNS query monitoring, with separate log files for regular and...

7AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2022/07/18 12:00 a.m.•34 views

Fedora: Security Advisory for dnscrypt-proxy (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.03931EPSS
SaveExploits3References2
OpenVAS
OpenVAS
•added 2022/07/06 12:00 a.m.•30 views

Fedora: Security Advisory for dnscrypt-proxy (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS8.9AI score0.0995EPSS
SaveExploits3References2
Rows per page
Query Builder