46 matches found
PT-2021-7713 · Dnsmasq +2 · Dnsmasq +2
Name of the Vulnerable Software and Affected Versions: Dnsmasq affected versions not specified Description: The issue is related to a buffer overflow in the extract name function of the fuzz util.c component of the Dnsmasq DNS server. This could allow a remote attacker to access confidential data...
DEBIAN-CVE-2020-25682
A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract names from DNS packets before validating them with DNSSEC data. An attacker on the network, who can create valid DNS replies, could use this flaw to cause an overflow with arbitrary...
dnsmasq: heap-based buffer overflow with large memcpy in sort_rrset() when DNSSEC is enabled
A flaw was found in dnsmasq. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. This flaw allows a remote attacker, who can create valid DNS replies, to cause an overflow in a heap-allocated memory. This flaw is caused b...
LiveZilla Live Chat Elevation of Privilege Vulnerability
LiveZilla Live Chat is a free online customer service system from the German company LiveZilla. The system provides real-time monitoring of visitors, offline messages, GeoTracking map tracking, access statistics, online chat and other features. A security vulnerability exists in the 'name' functi...
GNU Recutils Null Pointer Dereference Vulnerability (CNVD-2019-22424)
GNU Recutils is a set of tools and libraries for accessing human-editable plain text databases called recfiles. A null pointer dereference vulnerability exists in the recfieldsetname function in rec-field.c in librec.a in GNU Recutils 1.8. No details of the vulnerability are provided at this time...
krb5: Memory leak caused by supplying a null principal name in request
A memory leak flaw was found in the krb5unparsename function of the MIT Kerberos kadmind service. An authenticated attacker could repeatedly send specially crafted requests to the server, which could cause the server to consume large amounts of memory resources, ultimately leading to a denial of...