3195 matches found
CVE-2020-1350
creationtimestamp| type| source ---|---|--- 2020-07-14 05:00:00+00:00| seen| https://msrc.microsoft.com/blog/2020/07/july-2020-security-update-cve-2020-1350-vulnerability-in-windows-domain-name-system-dns-server/ 2020-07-14 18:51:05+00:00| published-proof-of-concept|...
BSA-2020-1051
Security Advisory ID : BSA-2020-1051 Component : Windows DNS Revision : 1.0: Final A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests. An attacker who successfully exploited the vulnerability could run arbitrary code in th...
[SECURITY] Fedora 31 Update: bind-9.11.20-1.fc31
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...
UBUNTU-CVE-2020-8169
curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS servers...
unbound: infinite loop via malformed DNS answers received from upstream servers
A flaw was found in unbound in versions prior to 1.10.1. An infinite loop can be created when malformed DNS answers are received from upstream servers. The highest threat from this vulnerability is to system availability...
unbound: amplification of an incoming query into a large number of queries directed to a target
A network amplification vulnerability was found in Unbound, in the way it processes delegation messages from one authoritative zone to another. This flaw allows an attacker to cause a denial of service or be part of an attack against another DNS server when Unbound is deployed as a recursive...
HashiCorp Consul Buffer Overflow Vulnerability
HashiCorp Consul is a distributed, highly available data center-aware solution. The product is used to connect and provision applications across dynamically distributed infrastructures. A buffer overflow vulnerability exists in the HTTP API and DNS in HashiCorp Consul and Consul Enterprise that...
Unspecified Vulnerability in D-Link DIR-600M and DSL 2730-U
The D-Link DIR-600M and the D-Link DSL 2730-U are both wireless routers from AUO D-Link of Taiwan, China. A security vulnerability exists in the DNS resolver search path in the D-Link DSL 2730-U IN1.10 version, IN1.11 version, and DIR-600M 3.04 version. A remote attacker could exploit this...
CVE-2020-13960
D-Link DSL 2730-U IN1.10 and IN1.11 and DIR-600M 3.04 devices have the domain.name string in the DNS resolver search path by default, which allows remote attackers to provide valid DNS responses and also offer Internet services such as HTTP for names that otherwise would have had an NXDOMAIN erro...
unbound: amplification of an incoming query into a large number of queries directed to a target
A network amplification vulnerability was found in Unbound, in the way it processes delegation messages from one authoritative zone to another. This flaw allows an attacker to cause a denial of service or be part of an attack against another DNS server when Unbound is deployed as a recursive...
XACK DNS Denial of Service Vulnerability
XACK DNS is a carrier-oriented DNS Domain Name System server from XACK Japan. A security vulnerability exists in XACK DNS. A remote attacker can exploit the vulnerability to degrade the performance of the recursive parser or use the recursive parser as a reflector to conduct a reflection attack...
Important: Red Hat Security Advisory: bind security update
An update for bind is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
bind: BIND does not sufficiently limit the number of fetches performed when processing referrals
A flaw was found in BIND, where it does not sufficiently limit the number of fetches that can be performed while processing a referral response. This flaw allows an attacker to cause a denial of service attack. The attacker can also exploit this behavior to use the recursing server as a reflector...
bind: BIND does not sufficiently limit the number of fetches performed when processing referrals
A flaw was found in BIND, where it does not sufficiently limit the number of fetches that can be performed while processing a referral response. This flaw allows an attacker to cause a denial of service attack. The attacker can also exploit this behavior to use the recursing server as a reflector...
The vulnerability of the DNS server service in Windows Server operating systems allows a perpetrator to trigger a distributed service failure.
The vulnerability of the DNS server service in Windows Server operating systems is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to trigger a distributed service failure remotely...
Unknown Vulnerability in Unbound (CNVD-2020-30671)
Unbound is a DNS resolver that supports verified recursion and caching. An unspecified vulnerability exists in Unbound. An attacker could exploit this vulnerability to cause a denial of service...
ISC BIND Resource Management Error Vulnerability
ISC BIND is the United States ISC company's set of open source software that implements the DNS protocol. A security vulnerability exists in ISC BIND. A remote attacker could exploit this vulnerability to cause a denial of service...
Vulnerabilities fixed in BIND
BIND has fixed several vulnerabilities that could allow a malicious potentially capable of causing a denial-of-service DoS cause. A DoS attack exploiting the vulnerability with attribute CVE-2020-8617, targets DNS clients. The vulnerability with attribute CVE-2020-8616 involves a new method for...