11 matches found
CVE-2021-23017-POC
CVE-2021-23017-POC Se identificó un problema de seguridad en el resolver de nginx, que podría permitir que un atacante capaz de falsificar paquetes UDP del servidor DNS provocara una sobrescritura de memoria de 1 byte, lo que resultaría en un bloqueo del proceso worker u otro impacto potencial. E...
CVE-2026-93657
A flaw was found in hickory-resolver. This vulnerability allows attackers to bypass Domain Name System Security Extensions DNSSEC authentication checks. By controlling the answering zone or being positioned on the network path, an attacker can have forged DNS records accepted as validated, leadin...
CVE-2026-93657 hickory-resolver before 0.26.2 DNSSEC Validation Bypass
hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup and Resolver::lookupip APIs, allowing invalid records to be returned as successful results. Attackers controlling the answering zone or positioned on the network path can have forged D...
CVE-2026-93657: Improper Verification of Cryptographic Signature
hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup and Resolver::lookupip APIs, allowing invalid records to be returned as successful results. Attackers controlling the answering zone or positioned on the network path can have forged D...
CVE-2023-41045: Insufficient Verification of Data Authenticity
Graylog is a free and open log management platform. Graylog makes use of only one single source port for DNS queries. Graylog binds a single socket for outgoing DNS queries and while that socket is bound to a random port number it is never changed again. This goes against recommended practice sin...
CVE-2021-31228
An issue was discovered in HCC embedded InterNiche 4.0.1. This vulnerability allows the attacker to predict a DNS query's source port in order to send forged DNS response packets that will be accepted as valid answers to the DNS client's requests without sniffing the specific request. Data is...
ALPINE-CVE-2020-25681
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overfl...
iodined <= 0.4.2-2 (forged DNS packet) Denial of Service Exploit
No description provided by source. !/usr/bin/perl iodined = 0.4.2 DoS exploit by Albert Sellares whatsatwekkdotnet http://www.wekk.net 2009-04-26 This exploit shuts down the iodined daemon using a forged DNS packet. It works on the last debian stable version 0.4.2-2. It produces a segmentation...
iodined <= 0.4.2-2 (forged DNS packet) Denial of Service Exploit
No description provided by source. !/usr/bin/perl iodined = 0.4.2 DoS exploit by Albert Sellares whatsatwekkdotnet http://www.wekk.net 2009-04-26 This exploit shuts down the iodined daemon using a forged DNS packet. It works on the last debian stable version 0.4.2-2. It produces a segmentation...
iodined 0.4.2-2 - forged DNS packet Denial of Service
iodined 0.4.2-2 - forged DNS packet Denial of Service !/usr/bin/perl iodined http://www.wekk.net 2009-04-26 This exploit shuts down the iodined daemon using a forged DNS packet. It works on the last debian stable version 0.4.2-2. It produces a segmentation fault on the daemon side. use IO::Socket...
iodined <= 0.4.2-2 (forged DNS packet) Denial of Service Exploit
Exploit for linux platform in category dos / poc ================================================================ iodined \n". "=============================================\n". "Usage: ./shoot-iodined host domain\n". " host: Host addr where iodined is listening\n". " domain: Domain that iodined ...