Cisco IOS Software and IOS XE Software mDNS Gateway Denial of Service Vulnerability

A vulnerability in the multicast DNS mDNS gateway function of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to reload the vulnerable device. The vulnerability is due to improper validation of mDNS packets. An attacker could exploit this vulnerability...

Cisco IOS Software mDNS Gateway Denial of Service Vulnerability (cisco-sa-20150325-mdns)

A vulnerability in the multicast DNS mDNS gateway function of Cisco IOS Software could allow an unauthenticated, remote attacker to reload the vulnerable device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

IPv6 Validation Toolkit

The IPv6 framework is a robust set of modules and plugins that allow a user to audit an IPv6 enabled network. The built-in modules support enumeration of IPv6 features such as ICMPv6 and Multicast Listener Discovery MLD. In addition, the framework also supports enumeration of Upper Layer Protocol...

Security Advisory - mDNS Message Improper Handling Vulnerability in Huawei WLAN AC Products

The mDNS module in Huawei WLAN AC products improperly processes mDNS packets and responds to mDNS unicast queries from outside the link local network e.g., the WAN, leading to information leaks.Vulnerability ID: HWPSIRT-2015-03024 The CVE No. of the vulnerability is CVE-2015-6586...

Cisco IOS XE Software mDNS Gateway DoS

The remote Cisco device is running a version of Cisco IOS XE software that is affected by a vulnerability in the multicast DNS gateway component due to improper validation of mDNS packets. A remote, unauthenticated attacker, by sending crafted packets to UDP port 5353, can exploit this to cause a...

Cisco IOS Software mDNS Gateway DoS

The remote Cisco device is running a version of Cisco IOS software that is affected by a vulnerability in the multicast DNS gateway component due to improper validation of mDNS packets. A remote, unauthenticated attacker, by sending crafted packets to UDP port 5353, can exploit this to cause a...

CVE-2015-1892

The Multicast DNS mDNS responder in IBM Security Access Manager for Web 7.x before 7.0.0 FP12 and 8.x before 8.0.1 FP1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service traffic amplification or obtai...

CVE-2015-1892

IBM Security Access Manager for Web (ISAM for Web) 7.x before 7.0.0 FP12 and 8.x before 8.0.1 FP1 is affected by CVE-2015-1892, a vulnerability in the mDNS responder that may reply to unicast queries from outside the local link. This can lead to information disclosure or a DoS via traffic amplifi...

CVE-2015-1892

The Multicast DNS mDNS responder in IBM Security Access Manager for Web 7.x before 7.0.0 FP12 and 8.x before 8.0.1 FP1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service traffic amplification or obtai...

Multicast DNS (mDNS) implementations may respond to unicast queries originating outside the local link

Overview Multicast DNS implementations may respond to unicast queries that originate from sources outside of the local link network. Such responses may disclose information about network devices or be used in denial-of-service DoS amplification attacks. Description Multicast DNS mDNS is a way for...

CVE-2015-0650

The Service Discovery Gateway aka mDNS Gateway in Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 3.9.xS and 3.10.xS before 3.10.4S, 3.11.xS before 3.11.3S, 3.12.xS before 3.12.2S, and 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service device reload by...

Design/Logic Flaw

The Service Discovery Gateway aka mDNS Gateway in Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 3.9.xS and 3.10.xS before 3.10.4S, 3.11.xS before 3.11.3S, 3.12.xS before 3.12.2S, and 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service device reload by...

CVE-2015-0650

Cisco IOS/IOS XE mDNS Gateway DoS (CVE-2015-0650): A vulnerability arising from improper validation of mDNS gateway UDP packets (port 5353) in Cisco IOS 12.2–12.4, 15.0–15.4 and IOS XE 3.9.xS–3.13.xS (before specific fixed versions 3.10.4S, 3.11.3S, 3.12.2S, 3.13.1S). An unauthenticated remote at...

CVE-2015-0650

The Service Discovery Gateway aka mDNS Gateway in Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 3.9.xS and 3.10.xS before 3.10.4S, 3.11.xS before 3.11.3S, 3.12.xS before 3.12.2S, and 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service device reload by...

Cisco IOS Software and IOS XE Software mDNS Gateway Denial of Service Vulnerability

A vulnerability in the multicast DNS mDNS gateway function of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to reload the vulnerable device. The vulnerability is due to improper validation of mDNS packets. An attacker could exploit this vulnerability...

mDNS Query

This module sends mDNS queries, which are really just normal UDP DNS queries done usually over multicast on a different port, 5353. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'mDNS Query',...

DNS Enumeration Script: DNSRecon

DNS reconnaissance is part of the information gathering stage on a penetration test engagement. When a penetration tester is performing a DNS reconnaissance he is trying to obtain as much information as he can regarding the DNS servers and their records. The information that can be gathered can...

DEBIAN-CVE-2014-9378

Ettercap 0.8.1 does not validate certain return values, which allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted 1 name to the parseline function in mdnsspoof/mdnsspoof.c or 2 base64 encoded password to the dissectorimap function in...

Cisco IOS Software Multiple mDNS Gateway DoS Vulnerabilities (cisco-sa-20140924-mdns)

According to its self-reported version, the version of Cisco IOS running on the remote host is affected by two unspecified denial of service vulnerabilities in the multicast DNS mDNS implementation. A remote attacker can exploit this issue by sending a specially crafted mDNS packet to cause the...

Cisco IOS XE Software Multiple mDNS Gateway DoS Vulnerabilities (cisco-sa-20140924-mdns)

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by two unspecified denial of service vulnerabilities in the multicast DNS mDNS implementation. A remote attacker can exploit this issue by sending a specially crafted mDNS packet to cause th...