Lucene search
+L

301 matches found

Mageia
Mageia
•added 2022/10/08 8:22 p.m.•58 views

Updated unbound packages fix security vulnerability

Non-Responsive Delegation Attack. CVE-2022-3204 Improves performance when under load, by cutting promiscuous queries for nameserver discovery and limiting the number of times a delegation point can look in the cache for missing records...

7.5CVSS2.6AI score0.01636EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/08/15 12:00 a.m.•20 views

totd 安全特征问题漏洞

totd is a small DNS proxy nameserver from the individual developer F.W. Dillema. A security signature issue vulnerability exists in totd version 1.5.3, which stems from the use of a fixed UDP source port in upstream queries sent to the DNS resolver, which would allow DNS cache poisoning...

9.8CVSS8.3AI score0.01808EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2022/08/09 9:37 a.m.•37 views

CVE-2022-30699

A flaw was found in Unbound, which is vulnerable to a novel type of "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the subdomain that updates...

6.5CVSS1AI score0.01122EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2022/08/09 9:36 a.m.•61 views

CVE-2022-30698

A flaw was found in Unbound, which is vulnerable to a novel type of "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the subdomain that updates...

6.5CVSS1AI score0.01122EPSS
SaveExploits0References3
Veracode
Veracode
•added 2022/08/06 4:54 a.m.•45 views

Insecure Caching

unbound uses insecure cashing. The vulnerability exists when the unbound is queried for a rogue domain name when the cached delegation information is about to expire, delaying the rogue nameserver response and allowing an attacker to overwrite the expired entries...

6.5CVSS6.5AI score0.01122EPSS
SaveExploits0References8Affected Software4
Tenable Nessus
Tenable Nessus
•added 2022/08/06 12:00 a.m.•43 views

FreeBSD : Unbound -- Multiple vulnerabilities (bc43a578-14ec-11ed-856e-d4c9ef517024)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the bc43a578-14ec-11ed-856e-d4c9ef517024 advisory. - NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the...

6.5CVSS6.9AI score0.01122EPSS
SaveExploits0References4
OSV
OSV
•added 2022/08/01 3:15 p.m.•8 views

DEBIAN-CVE-2022-30698

NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the...

6.5CVSS6.8AI score0.01122EPSS
SaveExploits0References1
OSV
OSV
•added 2022/08/01 3:15 p.m.•6 views

ALPINE-CVE-2022-30698

NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the...

6.5CVSS6.7AI score0.01122EPSS
SaveExploits0References1
NVD
NVD
•added 2022/08/01 3:15 p.m.•45 views

CVE-2022-30698

NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the...

6.5CVSS0.01122EPSS
SaveExploits0References5
OSV
OSV
•added 2022/08/01 3:15 p.m.•15 views

UBUNTU-CVE-2022-30699

NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation information is about to expire. The rogue...

6.5CVSS6.7AI score0.01122EPSS
SaveExploits0References4
OSV
OSV
•added 2022/08/01 3:15 p.m.•9 views

UBUNTU-CVE-2022-30698

NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the...

6.5CVSS6.7AI score0.01122EPSS
SaveExploits0References4
Prion
Prion
•added 2022/08/01 3:15 p.m.•33 views

Design/Logic Flaw

NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the...

4CVSS6.3AI score0.01122EPSS
SaveExploits0References5Affected Software2
Debian CVE
Debian CVE
•added 2022/08/01 2:13 p.m.•49 views

CVE-2022-30699

NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation information is about to expire. The rogue...

6.5CVSS6.8AI score0.01122EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/08/01 2:13 p.m.•64 views

CVE-2022-30699

NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation information is about to expire. The rogue...

6.5CVSS6.9AI score0.01122EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/08/01 2:13 p.m.•76 views

CVE-2022-30698

NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the...

6.5CVSS6.8AI score0.01122EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/08/01 2:13 p.m.•53 views

CVE-2022-30698

NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the...

6.5CVSS6.9AI score0.01122EPSS
SaveExploits0
attackerkb
attackerkb
•added 2022/08/01 12:00 a.m.•12 views

CVE-2022-30699

NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation information is about to expire. The rogue...

6.5CVSS5.8AI score0.01122EPSS
SaveExploits0References8
FreeBSD
FreeBSD
•added 2022/08/01 12:00 a.m.•35 views

Unbound -- Multiple vulnerabilities

NLnet Labs reports: novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation information is about to expire. The rogue nameserver delays the response so that the cached delegation...

1.2AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2022/05/08 12:00 a.m.•24 views

Fedora: Security Advisory for pdns (FEDORA-2022-ccfd5d1045)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.05004EPSS
SaveExploits0References2
Fedora
Fedora
•added 2022/05/07 4:59 a.m.•35 views

[SECURITY] Fedora 36 Update: pdns-4.6.2-1.fc36

The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...

7.5CVSS1.4AI score0.05004EPSS
SaveExploits0
Rows per page
Query Builder