PT-2026-63380

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.15.0 through 1.25.1 Description A use-after-free issue exists in the handling of DNS-over-TLS DoT forwarded queries. The TLS server name is tied to the lifetime of the serviced query struct but is also referenced ...

CVE-2025-40338

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Do not share the name pointer between components By sharing 'name' directly, tearing down components may lead to use-after-free errors. Duplicate the name to avoid that. At the same time, update the order of...

CVE-2025-40338

CVE-2025-40338 is a Linux kernel vulnerability in ASoC: Intel avs where sharing the component name pointer could cause use-after-free during teardown. The fix duplicates the component name to prevent lifetime issues and updates the initialization/teardown order (noting that the config may pass a ...

CVE-2025-40338 ASoC: Intel: avs: Do not share the name pointer between components

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Do not share the name pointer between components By sharing 'name' directly, tearing down components may lead to use-after-free errors. Duplicate the name to avoid that. At the same time, update the order of...

CVE-2025-40338 ASoC: Intel: avs: Do not share the name pointer between components

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Do not share the name pointer between components By sharing 'name' directly, tearing down components may lead to use-after-free errors. Duplicate the name to avoid that. At the same time, update the order of...

CVE-2025-40338: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Do not share the name pointer between components By sharing 'name' directly, tearing down components may lead to use-after-free errors. Duplicate the name to avoid that. At the same time, update the order of...

EUVD-2006-4506

Malware in sbrugna...

ALPINE-CVE-2018-19278

Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x before 16.0.1 allows remote attackers to crash Asterisk via a specially crafted DNS SRV or NAPTR response, because a buffer size is supposed to match an expanded length but actually matches a compressed...

Qbik WinGate压缩名称指针拒绝服务漏洞

Qbik WinGate是一款Internet网关和通讯服务器。 Qbik WinGate在处理畸形的DNS报文时存在漏洞，远程攻击者可能利用此漏洞导致DNS无法响应正常请求。 如果DNS请求包含有引用其自身的压缩名称指针的话，则向Qbik WinGate服务器发送了这样请求就会导致死循环，耗尽所有CPU资源。 Qbik WinGate = 6.1.4 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.wingate.com/download.php x00\x00 - Transaction ID \x00\x00 - Flags \x00\x0...

WinGate DNS Compressed Name Pointer DoS

The remote host appears to be running WinGate, a Windows application for managing and securing Internet access. The version of WinGate installed on the remote host contains a flaw involving the processing of DNS requests with compressed name pointers. By sending a specially crafted DNS request to...