Google Chrome Restriction Bypass Vulnerability

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the 'DecodeHSTSPreloadRaw' function in the net/http/transportsecuritystate.cc file in versions of Google Chrome prior to 43.0.2357.130, which originates from The program fails to...

RubyGems Redirection Vulnerability

RubyGems is a Ruby package manager from the RubyGems organization, which is used to distribute and manage Ruby packages. RubyGems programs fail to validate hostnames when fetching gem or constructing API requests, allowing remote attackers to submit specially crafted DNS SRV records to redirect...

DEBIAN-CVE-2015-3900

RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record, aka a "DNS hijack attack."...

The vulnerability of the CentOS operating system, which allows a malicious attacker to compromise the accessibility of protected information

The vulnerability of the avahi-compat-libdnssd-0.6.16 package on the CentOS operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ldns package up to version 1.6.11 of the Gentoo Linux operating system can lead to violations of privacy, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the microprogramming software of the Cisco ASA security device allows a remote attacker to induce a maintenance failure.

The vulnerability of the microprogramming software of the Cisco ASA security device in the DNS service allows a malicious actor to trigger a service failure excessive memory consumption or device malfunctions. This is achieved by initiating DNS queries and sending specially crafted responses to...

[SECURITY] Fedora 21 Update: openldap-2.4.40-3.fc21

OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols for accessing directory services usually phone book style information, but other information is possible over the Internet, similar to the way DNS Domain...

Cisco ASA DNS Memory Exhaustion Vulnerability

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A security vulnerability in the DNS code of Cisco ASA Software can be exploited by an unauthenticated, remote attacker to exhaust free memory and cause a system crash...

PT-2015-1056 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 7.2 through 7.25.15 Cisco Adaptive Security Appliance ASA Software versions 8.2 through 8.25.56 Cisco Adaptive Security Appliance ASA Software versions 8.3 through 8.32.43 Cisco Adaptive...

Synology DiskStation Manager Multicast DNS (mDNS) responder denial of service vulnerability

Synology DiskStation Manager is the first NAS operating system to provide a user interface for network multitasking. A security vulnerability exists in the Synology DiskStation Manager Multicast DNS mDNS responder, which can be exploited by remote attackers to gain access to sensitive information...

Android OS may behave as an open resolver

Overview A device that runs as a DNS cache server, which responds to any recursive DNS queries that are received is referred to as an open resolver. Android OS contains an issue where it may behave as an open resolver when the tethering function is enabled. Yasuhiro Orange Morishita of Japan...

Moderate: Red Hat Security Advisory: bind security update

Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

USN-2519-1 eglibc, glibc vulnerabilities

Arnaud Le Blanc discovered that the GNU C Library incorrectly handled file descriptors when resolving DNS queries under high load. This may cause a denial of service in other applications, or an information leak. This issue only affected Ubuntu 10.04 LTS, Ubuntu 12.04 LTS and Ubuntu 14.04 LTS...

UBUNTU-CVE-2014-9402

The nssdns implementation of getnetbyname in GNU C Library aka glibc before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service infinite loop by sending a positive answer while a network name is being process...

ISC BIND Remote Denial of Service Vulnerability (CNVD-2015-01326)

ISC BIND is an implementation of the DNS protocol. A remote denial of service vulnerability exists in the ISC BIND Trust Anchor management, which allows an attacker to submit a malicious request to crash the name service program...

D-Link DSL-2740R Web Interface Authentication Bypass Vulnerability

The D-Link DSL-2740R is a home wireless ADSL router. An authentication bypass vulnerability exists in the D-Link DSL-2740R web interface, which can be exploited by attackers to modify DNS settings, intercept sessions, or launch denial of service attacks...

Eucalyptus Denial of Service Vulnerability (CNVD-2015-00109)

Eucalyptus is an open source software infrastructure used to enable elastic, utility cloud computing through compute clusters or groups of workstations. A denial of service vulnerability exists in Eucalyptus versions 3.3.x and 3.4.x prior to 3.4.2 that allows remote attackers to cause a denial of...

Huawei Tecal RH Series Has Multiple Vulnerabilities

Huawei Tecal RH Series is a rackmount server product. The Huawei Tecal RH Series device fails to properly validate user HTTP requests when processing the length of DNS server packets, allowing the user to perform certain actions resulting in buffer overflows or execution of arbitrary code...

Microsoft DNS Server RPC Management Interface Buffer Overflow (MS07-029) - Ver2 (CVE-2007-1748)

The DNS server service is a component that provides name resolution services to a network.A buffer overflow vulnerability has been reported in the Microsoft Windows Domain Name System DNS Server services.An attacker may exploit this vulnerability to execute arbitrary code on a target system via a...

UBUNTU-CVE-2014-4883

resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle attackers to conduct cache-poisoning attacks via spoofed reply packets...