numa

Numa Votre DNS, partout où vous allez. — numa.rs Un résolveur DNS portable dans un seul binaire. Bloquez les publicités sur n'importe quel réseau, nommez vos services locaux frontend.numa, remplacez n'importe quel nom d'hôte avec rétablissement automatique, et scellez chaque requête sortante avec...

dnsviz

Содержание Установка Использование Предэксплуатационное тестирование DNS Docker-контейнер Описание DNSViz — это набор инструментов для анализа и визуализации поведения системы доменных имён DNS, включая её расширения безопасности DNSSEC. Этот набор инструментов обеспечивает работу веб-анализа,...

NSEC3-Encloser-Attack

Génération de fichiers de zone pour l'attaque NSEC3-Encloser Ce projet génère des fichiers de zone DNS avec des paramètres NSEC3 personnalisés pour reproduire et évaluer les attaques dans CVE-2023-50868. Prérequis Python3 testé sur Python3.10 Dépendances Python installées : cryptography 42.0.5...

CVE-2023-50387

CVE-2023-50387 KeyTrap dans le DNS CVE-2023-50387 Ce dépôt est à des fins éducatives. Le nombre de clés et de signatures a été volontairement maintenu bas pour empêcher leur utilisation dans de véritables attaques, et aucun script de génération de clés en collision n'est inclus. Test Mise en plac...

vaas-cve-2015-5477

Vulnérabilité en tant que Service - CVE 2015-5477 Un système Linux Debian Wheezy avec une version vulnérable de bind9 pour présenter CVE-2015-5477. Aperçu Ce conteneur Docker est basé sur Debian Wheezy et a été modifié pour utiliser une version vulnérable de bind9 ainsi que les dépendances...

CVE-2026-81642

CVE-2026-81642 — Unbound DNSKEY digest heap overflow tracking site Source for the CVE-2026-81642 patch-status tracker: a single-page site recording which distributions have shipped a fix for the Unbound DNSSEC validator heap overflows and the ReTrap complexity attacks disclosed alongside them...

dns-benchmark-tool

⚠️ ce projet a été déplacé et n'est plus maintenu. installez le successeur : pip install net-benchmark dépôt : https://github.com/net-benchmark/net-benchmark toutes les commandes et options existantes restent entièrement compatibles. Outil de Benchmark DNS Partie de BuildTools - Suite de...

NSEC3-X

AVERTISSEMENT : Ce projet a été généré par Intelligence Artificielle IA mais a subi un processus rigoureux de « Human-in-the-Loop » HITL. Cela signifie que le code a été revu et refactorisé par un ingénieur logiciel humain, la conception architecturale a été dirigée par un humain, et un audit de...

SSR-DNSSEC

L'infrastructure DNS utilisée pour cette preuve de concept est celle suggérée sur SEED Labs, disponible à l'adresse : https://seedsecuritylabs.org/Labs20.04/Networking/DNS/DNSSEC/, avec quelques modifications mineures. L'infrastructure se compose d'un serveur racine, d'un serveur de domaine de...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.56 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

Rocky Linux 9 [CIQ] Security Update: python3-unbound / python3-unbound-debuginfo / unbound / etc Multiple Vulnerabilities (crlsa-2026_71487)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202671487 advisory. unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis CVE-2026-82717 unbound: Unbound: Heap buffer overflow via malicious DNSSEC respon...

Rocky Linux 9.6 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-dnssec-doc / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1790328589)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790328589 advisory. - On a resolver configured to use dns64, if an applicable answer from the authoritative server is malformed in a specific way, the...

Rocky Linux 9 [CIQ] Security Update: bind9.18 / bind9.18-chroot / bind9.18-debuginfo / etc (crlsa-2026_7915)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20267915 advisory. bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone CVE-2026-1519 Tenable has extracted the preceding description block directly from the CI...

CentOS Linux 8 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-export-devel / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1790583590)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1790583590 advisory. - On a resolver configured to use dns64, if an applicable answer from the authoritative server is malformed in a specific way, th...

Rocky Linux 8 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc (crlsa-2026_8352)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20268352 advisory. bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone CVE-2026-1519 Tenable has extracted the preceding description block directly from the CI...

AlmaLinux 9.2 [TuxCare] Security Update: dnsmasq / dnsmasq-utils Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1745269163)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1745269163 advisory. - Certain DNSSEC aspects of the DNS protocol in RFC 4033, 4034, 4035, 6840, and related RFCs allow remote attackers to cause a denia...

Rocky Linux 10.2 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2026_55437)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202655437 advisory. bind9: bind: Potential wildcard CNAME RPZ policy bypass CVE-2026-11331 bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field...

AlmaLinux 9.2 [TuxCare] Security Update: dnsmasq / dnsmasq-utils (ALMALINUX9.2:CLSA-2026:1784645899)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784645899 advisory. - A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY repli...

CentOS Linux 7 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-export-devel / etc (CENTOS7:CLSA-2026:1780067897)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1780067897 advisory. - If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU...

Rocky Linux 9.6 [TuxCare] Security Update: python3-unbound / unbound / unbound-devel / unbound-dracut / etc (ALMALINUX9.6:CLSA-2026:1790264968)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790264968 advisory. - In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and...