The vulnerability of Amped Wireless R10000’s microprogramming software allows a hacker to replace the response to a request.

The vulnerability of Amped Wireless R10000’s microprogramming software lies in the use of an inappropriate algorithm for selecting the ID value in DNS requests. Exploiting this vulnerability allows a remote attacker to replace the response to a request...

The vulnerability of the microprogrammed software of the N600 DB Belkin F9K1102 allows a hacker to replace the responses to requests.

The vulnerability of the N600 DB Belkin F9K1102 router’s microprogramming software exists due to the use of an incorrect algorithm for selecting the value of the ID in the DNS query header. Exploiting this vulnerability allows a malicious actor to replace the responses to queries by predicting th...

The vulnerability of the Samba file system allows a perpetrator to obtain confidential information or cause service interruptions.

The vulnerability of the internal DNS server of the Samba file system arises due to buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure reading beyond the memory limit or obtain confidential information by loading a specially...

DEBIAN-CVE-2015-8702

The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service netsplit via an invalid character in a PTR response, as demonstrated by a "\032" whitespace character in a hostname...

The vulnerability of the Nginx proxy server allows attackers to induce a service failure.

The vulnerability of the Nginx proxy server is related to pointer dereferencing errors. Exploiting this vulnerability allows a malicious actor to cause a service failure incorrect pointer dereferencing and emergency termination of operations through a specially crafted UDP DNS response...

[SECURITY] Fedora 24 Update: bind-9.10.3-12.P4.fc24

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

DEBIAN-CVE-2016-0771

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service out-of-bounds read or possibly obtain sensitive information from process memory by...

ISC BIND rndc Control Instance Denial of Service Vulnerability

ISC BIND is a set of open source software that implements the DNS protocol. A design flaw in the BIND rndc control instance's handling of request input can lead to an assertion failure in sexpr.c or alist.c, which can ultimately lead to the exit of the named process when a malformed packet is sen...

ISC BIND Query Packet Cookie Option Denial of Service Vulnerability

ISC BIND is a set of open source software that implements the DNS protocol. BIND 9.10 provides native support for DNS cookies or user identification, a mechanism designed to protect the security of the query requestor and domain name servers when they interact. An attacker can maliciously constru...

UBUNTU-CVE-2016-0771

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service out-of-bounds read or possibly obtain sensitive information from process memory by...

DNS BIND server vulnerability, allowing attackers to cause service failures

The vulnerability of the DNS BIND server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause a service failure—such as the appearance of an error message “Assertion failure” or the termination of the daemon—by using a specially...

GNU glibc getaddrinfo() stack buffer overflow vulnerability

GNU glibc is an open source C compiler released under the LGPL license and is an implementation of the C library for the Linux operating system. A stack overflow vulnerability exists in the getaddrinfo function of glibc when processing a specific dns response packet, which can be exploited by an...

USN-2900-1 eglibc, glibc vulnerability

It was discovered that the GNU C Library incorrectly handled receiving responses while performing DNS resolution. A remote attacker could use this issue to cause the GNU C Library to crash, resulting in a denial of service, or possibly execute arbitrary code...

DEBIAN-CVE-2016-0746

Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service worker process crash or possibly have unspecified other impact via a crafted DNS response related to CNAME response processing...

DEBIAN-CVE-2016-0742

The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service invalid pointer dereference and worker process crash via a crafted UDP DNS response...

Huawei E5186 4G LTE Router Security Bypass Vulnerability

Huawei E5186 4G LTE Router is a 4G wireless router product from Huawei, China. The Huawei E5186 4G LTE Router allows DNS query packets to use static source ports, allowing remote attackers to exploit this vulnerability to forge responses...

Unauthorized Access Vulnerability in DMS Integrated Management System of Shanghai Toothwood Communication Technology Co.

Toothwood Technology yamutech claims to be the leading integrated DNS service provider with the widest coverage area and the largest number of users in China. Multiple overstepping access vulnerabilities exist in the DMS, the network management module of yamutech's DNS equipment, allowing an...

bind: delegation handling denial of service

A denial of service flaw was found in the way BIND followed DNS delegations. A remote attacker could use a specially crafted zone containing a large number of referrals which, when looked up and processed, would cause named to use excessive amounts of memory or crash...

RedHat Update for bind RHSA-2016:0073-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UBUNTU-CVE-2016-0742

The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service invalid pointer dereference and worker process crash via a crafted UDP DNS response...