Lucene search
+L

81 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•10 views

Astra Linux – Vulnerability in dnsmasq

A buffer overflow in the dnsmasq’s extractaddresses function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response. This enables extractname to advance the pointer past the end of the record...

7.3CVSS7.5AI score0.00687EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/08/18 12:42 p.m.•14 views

CVE-2026-73508

A flaw was found in Netty, an asynchronous network application framework. When processing malformed domain names in DNS packets, the DNS record decoder fails to release allocated memory. This vulnerability allows an unauthenticated remote attacker to incrementally leak direct memory, eventually...

7.5CVSS5.8AI score0.00382EPSS
SaveExploits0References8
OSV
OSV
•added 2026/05/11 6:16 p.m.•25 views

ALPINE-CVE-2026-5172

A buffer overflow in dnsmasq’s extractaddresses function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extractname to advance the pointer past the record’s end...

7.3CVSS7.5AI score0.00687EPSS
SaveExploits1References1
OSV
OSV
•added 2026/05/11 6:16 p.m.•13 views

AZL-86766 CVE-2026-5172 affecting package dnsmasq for versions less than 2.92-1

A buffer overflow in dnsmasq’s extractaddresses function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extractname to advance the pointer past the record’s end...

7.5CVSS7.5AI score0.00687EPSS
SaveExploits1References1
CVE
CVE
•added 2026/05/11 4:48 p.m.•85 views

CVE-2026-5172

The dnsmasq DNS configuration tool contains a buffer overflow in the extract_addresses() function. By providing a malformed DNS response , an attacker can trigger a heap out-of-bounds read , causing the extract_name() function to advance a pointer past the end of the record. This vulnerability ca...

7.5CVSS7.5AI score0.00687EPSS
SaveExploits1References10
AlpineLinux
AlpineLinux
•added 2026/05/11 4:48 p.m.•35 views

CVE-2026-5172

A buffer overflow in dnsmasq’s extractaddresses function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extractname to advance the pointer past the record’s end...

7.5CVSS7.5AI score0.00687EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/11 12:00 a.m.•2 views

CVE-2026-5172: Out-of-bounds Read

A buffer overflow in dnsmasq’s extractaddresses function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extractname to advance the pointer past the record’s end...

7.5CVSS7.5AI score0.00687EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/04/30 12:00 a.m.•23 views

Exim 安全漏洞

Exim is an open-source message transfer agent MTA developed by Exim Foundation and running on Unix systems. It primarily handles the routing, forwarding, and delivery of emails. Prior to Exim 4.99.2, there was a security vulnerability. This vulnerability occurred due to an exception in the octal...

7.5CVSS7.3AI score0.00607EPSS
SaveExploits0References1
FreeBSD
FreeBSD
•added 2026/03/25 12:00 a.m.•24 views

dnsmasq -- multiple vulnerabilities

Simon Kelley reports: Today, 11th May 2026 CERT is releasing a set of six CVEs for serious security vulnerabilities in dnsmasq. These are all long-standing bugs which apply to pretty much all non-ancient versions. Christopher Cullen and Molly Jaconski write, in Vulnerability Note VU471747:...

8.8CVSS7.3AI score0.01068EPSS
SaveExploits4References2
RedHat Linux
RedHat Linux
•added 2025/11/06 3:50 p.m.•13 views

bind: Resource exhaustion via malformed DNSKEY handling

A vulnerability was found in BIND 9 resolvers, where processing malformed DNSKEY records from a specially crafted zone can lead to resource exhaustion, primarily causing excessive CPU utilization. This issue enables a remote, unauthenticated attacker to degrade resolver performance and potentiall...

7.5CVSS6.7AI score0.10737EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/10/24 12:00 a.m.•13 views

Ubuntu: Security Advisory (USN-7836-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS7AI score0.10737EPSS
SaveExploits1References2
OSV
OSV
•added 2025/10/22 4:15 p.m.•17 views

AZL-68733 CVE-2025-8677 affecting package bind for versions less than 9.16.50-3

Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1...

7.5CVSS6.7AI score0.10737EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2006-7036

Malware in sbrugna...

7.8CVSS6.4AI score0.01755EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•7 views

EUVD-2015-3341

Malware in sbrugna...

6.4CVSS7.5AI score0.04425EPSS
SaveExploits1References16
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•34 views

EUVD-2017-15667

Malware in sbrugna...

5.8CVSS6.2AI score0.01986EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2000-0332

Malware in sbrugna...

5CVSS6.4AI score0.07576EPSS
SaveExploits3References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2015-4207

Malware in sbrugna...

5CVSS6.3AI score0.03466EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2006-5405

Malware in sbrugna...

5CVSS6.4AI score0.02568EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•9 views

EUVD-2000-0565

Malware in sbrugna...

5CVSS6.4AI score0.03306EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2025/05/22 3:26 p.m.•18 views

CVE-2020-27736

A vulnerability has been identified in APOGEE PXC Compact BACnet All versions V3.5.5, APOGEE PXC Compact P2 Ethernet All versions V2.8.20, APOGEE PXC Modular BACnet All versions V3.5.5, APOGEE PXC Modular P2 Ethernet All versions V2.8.20, Nucleus NET All versions, Nucleus ReadyStart V3 All versio...

6.5CVSS6.5AI score0.03572EPSS
SaveExploits0
Rows per page
Query Builder