UBUNTU-CVE-2025-40775

When an incoming DNS protocol message includes a Transaction Signature TSIG, BIND always checks it. If the TSIG contains an invalid value in the algorithm field, BIND immediately aborts with an assertion failure. This issue affects BIND 9 versions 9.20.0 through 9.20.8 and 9.21.0 through 9.21.7...

External DNS Management 输入验证错误漏洞

External DNS Management is a Gardener open source environment for managing external DNS entries for kubernetes clusters. An input validation error vulnerability exists in External DNS Management versions prior to 0.23.6, which stems from malicious Google credentials in DNS and could lead to...

Agent Name Service (ANS): a Universal Directory for Secure AI Agent Discovery and Interoperability

The proliferation of AI agents requires robust mechanisms for secure discovery. This paper introduces the Agent Name Service ANS, a novel architecture based on DNS addressing the lack of a public agent discovery framework. ANS provides a protocol-agnostic registry infrastructure that leverages...

c-ares: c-ares has a use-after-free in read_answers()

A flaw was found in c-ares. This vulnerability allows a remote or local attacker to cause a use-after-free, potentially leading to application-level denial of service or other unexpected behavior via manipulation of DNS responses or network conditions during query processing...

Bullfrog 安全漏洞

Bullfrog is a simple plug-and-play Github tool open-sourced by Bullfrog Security. A security vulnerability exists in Bullfrog versions prior to 0.8.4, which stems from improper use of TCP leading to DNS data exfiltration that may bypass sandbox restrictions...

avahi: Avahi Wide-Area DNS Predictable Transaction IDs

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

c-ares: c-ares has a use-after-free in read_answers()

A flaw was found in c-ares. This vulnerability allows a remote or local attacker to cause a use-after-free, potentially leading to application-level denial of service or other unexpected behavior via manipulation of DNS responses or network conditions during query processing...

c-ares: c-ares has a use-after-free in read_answers()

A flaw was found in c-ares. This vulnerability allows a remote or local attacker to cause a use-after-free, potentially leading to application-level denial of service or other unexpected behavior via manipulation of DNS responses or network conditions during query processing...

containers/aardvark-dns: TCP Query Handling Flaw in Aardvark-dns Leading to Denial of Service

A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open indefinitely, causing the server to become unresponsive and resulting in other DNS queries timing...

TOTOLINK A3002R 安全漏洞

TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3002R suffers from a buffer overflow vulnerability that originates from the failure of the routername parameter in the formDnsv6 interface to correctly validate the length and size of the input data, which...

CVE-2025-1330

IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the gethostbyname function...

IBM CICS TX Standard 安全漏洞

IBM CICS TX Standard is a comprehensive single transaction runtime package from International Business Machines IBM. A security vulnerability exists in the IBM CICS TX gets function handling DNS return requests, which can be exploited by a local attacker to submit a special request that can be us...

c-ares: c-ares has a use-after-free in read_answers()

A flaw was found in c-ares. This vulnerability allows a remote or local attacker to cause a use-after-free, potentially leading to application-level denial of service or other unexpected behavior via manipulation of DNS responses or network conditions during query processing...

The vulnerability of the DNSServer software’s microprogramming system in Wi-Fi amplifiers, subscriber terminals, DSL/Ethernet CPE routers allows a perpetrator to execute arbitrary commands.

The vulnerability of the DNSServer software, a microprogramming-based system for Wi-Fi amplifiers, subscriber terminals, Fiber ONTs, and DSL/Ethernet CPEs exists due to the lack of measures to neutralize specific elements. Exploiting this vulnerability allows an attacker operating remotely to...

CLSA-2025-1745269163 dnsmasq: Fix of 2 CVEs

CVE-2023-50387: DNSSEC aspects of the DNS protocol allow remote attackers to cause a DDOS - CVE-2023-50868: The Closest Encloser Proof aspect of the DNS protocol allows remote attackers to cause a DDOS...

The vulnerability of the ns_resolv() function in the ConnMan connection driver allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the nsresolv function in the ConnMan connection driver is related to the improper generation of error reports when processing DNS responses. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...

DEBIAN-CVE-2025-32743

In ConnMan through 1.44, the lookup string in nsresolv in dnsproxy.c can be NULL or an empty string when the TC Truncated bit is set in a DNS response. This allows attackers to cause a denial of service application crash or possibly execute arbitrary code, because those lookup values lead to...

CVE-2025-32743

In ConnMan through 1.44, the lookup string in nsresolv in dnsproxy.c can be NULL or an empty string when the TC Truncated bit is set in a DNS response. This allows attackers to cause a denial of service application crash or possibly execute arbitrary code, because those lookup values lead to...

Linux ConnMan 安全漏洞

Linux ConnMan is an application from the Linux community in the United States. It provides Intel's Modular Network Connection Manager. A security vulnerability exists in Linux ConnMan versions 1.44 and earlier, which stems from a TC bit setting in the DNS response resulting in a denial of service...

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.

...