glibc: getaddrinfo stack-based buffer overflow

A stack-based buffer overflow was found in the way the libresolv library performed dual A/AAAA DNS queries. A remote attacker could create a specially crafted DNS response which could cause libresolv to crash or, potentially, execute code with the permissions of the user running the library. Note...

glibc: getaddrinfo stack-based buffer overflow

A stack-based buffer overflow was found in the way the libresolv library performed dual A/AAAA DNS queries. A remote attacker could create a specially crafted DNS response which could cause libresolv to crash or, potentially, execute code with the permissions of the user running the library. Note...

Critical: Red Hat Security Advisory: glibc security update

Updated glibc packages that fix one security issue are now available for Red Hat Enterprise Linux 6.2, 6.4, and 6.5 Advanced Update Support, and Red Hat Enterprise Linux 6.6 and 7.1 Extended Update Support. Red Hat Product Security has rated this update as having Critical security impact. A Commo...

UBUNTU-CVE-2015-7547

Multiple stack-based buffer overflows in the 1 senddg and 2 sendvc functions in the libresolv library in the GNU C Library aka glibc or libc6 before 2.23 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted DNS response that triggers a call to...

glibc -- getaddrinfo stack-based buffer overflow

Fabio Olive Leite reports: A stack-based buffer overflow was found in libresolv when invoked from nssdns, allowing specially crafted DNS responses to seize control of EIP in the DNS client. The buffer overflow occurs in the functions senddg send datagram and sendvc send TCP for the NSS module...

UBUNTU-CVE-2015-5180

resquery in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service NULL pointer dereference and process crash...

APPLE-SA-2012-03-07-2 iOS 5.1 Software Update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2012-03-07-2 iOS 5.1 Software Update iOS 5.1 Software Update is now available and addresses the following: CFNetwork Available for: iPhone 3GS, iPhone 4, iPhone 4S, iPod touch 3rd generation and later, iPad, iPad 2 Impact: Visiting a...

APPLE-SA-2012-03-07-3 Apple TV 5.0

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2012-03-07-3 Apple TV 5.0 Apple TV 5.0 is now available and addresses the following: Apple TV Available for: Apple TV 2nd generation Impact: Applications that use the libresolv library may be vulnerable to an unexpected application terminatio...

CVE-2011-3453

Integer overflow in libresolv in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption and application crash via crafted DNS data...

Integer overflow

Integer overflow in libresolv in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption and application crash via crafted DNS data...

CVE-2011-3453

CVE-2011-3453: Apple Mac OS X libresolv DNS handling overflow. Affected: OS X pre-10.7.3; Apple TV 5.0 update references heap corruption and arbitrary code execution via crafted DNS data. Impact: remote code execution or denial of service; no exploit details provided in the documents. Remediation...

CVE-2011-3453

Integer overflow in libresolv in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption and application crash via crafted DNS data...

Mac OS X Multiple Vulnerabilities (Security Update 2012-001) (BEAST)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2012-001 applied. This update contains multiple security-related fixes for the following components : - Apache - ATS - ColorSync - CoreAudio - CoreMedia - CoreText - curl - Data Security - dovecot - filecmds ...

Mac OS X 10.7.x < 10.7.3 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.3. The newer version contains multiple security-related fixes for the following components : - Address Book - Apache - ATS - CFNetwork - CoreMedia - CoreText - CoreUI - curl - Data Security - dovecot - filecmds - ImageI...

Mac OS X 10.5.5 Update / Security Update 2008-006

The remote host is missing Mac OS X 10.5.5 Update / Security Update 2008-006. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Mac OS X 10.5.5 Update / Security Update 2008-006

The remote host is missing Mac OS X 10.5.5 Update / Security Update 2008-006. One or more of the following components are affected: ATS BIND ClamAV Directory Services Finder ImageIO Kernel libresolv Login Window mDNSResponder OpenSSH QuickDraw Manager Ruby SearchKit System Configuration System...

Solaris Update for in.dhcpd libresolv and BIND9 114265-19

Check for the Version of in.dhcpd libresolv and BIND9 OpenVAS Vulnerability Test Solaris Update for in.dhcpd libresolv and BIND9 114265-19 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Solaris Update for in.dhcpd libresolv and BIND9 112837-20

Check for the Version of in.dhcpd libresolv and BIND9 OpenVAS Vulnerability Test Solaris Update for in.dhcpd libresolv and BIND9 112837-20 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Solaris Update for in.dhcpd libresolv and BIND9 114265-19

Check for the Version of in.dhcpd libresolv and BIND9 OpenVAS Vulnerability Test Solaris Update for in.dhcpd libresolv and BIND9 114265-19 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Solaris Update for in.dhcpd libresolv and BIND9 112837-20

Check for the Version of in.dhcpd libresolv and BIND9 OpenVAS Vulnerability Test Solaris Update for in.dhcpd libresolv and BIND9 112837-20 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...