146 matches found
golang: net: malformed DNS message can cause infinite loop
A flaw was found in the net package of the Go stdlib. When a malformed DNS message is received as a response to a query, the Lookup functions within the net package can get stuck in an infinite loop. This issue can lead to resource exhaustion and denial of service DoS conditions...
golang: net: malformed DNS message can cause infinite loop
A flaw was found in the net package of the Go stdlib. When a malformed DNS message is received as a response to a query, the Lookup functions within the net package can get stuck in an infinite loop. This issue can lead to resource exhaustion and denial of service DoS conditions...
Photon OS 5.0: Net PHSA-2023-5.0-0025
An update of the net package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0025. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20432...
Photon OS 4.0: Net PHSA-2024-4.0-0542
An update of the net package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0542. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20425...
Photon OS 4.0: Net PHSA-2023-4.0-0381
An update of the net package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0381. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20418...
Photon OS 4.0: Net PHSA-2023-4.0-0401
An update of the net package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0401. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20448...
Photon OS 2.0: Net PHSA-2018-2.0-0037
An update of the net package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0037. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20304...
Malicious code in Stl.CommandLine.Net (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in LiveCharts.Wpf.net (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in GetRekt420 (NuGet)
--- -= Per source details. Do not edit below this line.=-...
golang: net: malformed DNS message can cause infinite loop
A flaw was found in the net package of the Go stdlib. When a malformed DNS message is received as a response to a query, the Lookup functions within the net package can get stuck in an infinite loop. This issue can lead to resource exhaustion and denial of service DoS conditions...
CVE-2024-24788
A flaw was found in the net package of the Go stdlib. When a malformed DNS message is received as a response to a query, the Lookup functions within the net package can get stuck in an infinite loop. This issue can lead to resource exhaustion and denial of service DoS conditions. Mitigation...
go -- net: malformed DNS message can cause infinite loop
The Go project reports: net: malformed DNS message can cause infinite loop A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms
A security feature bypass vulnerability was found in Blazor forms in ASP.NET in the .NET package...
dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms
A security feature bypass vulnerability was found in Blazor forms in ASP.NET in the .NET package...
dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms
A security feature bypass vulnerability was found in Blazor forms in ASP.NET in the .NET package...
CVE-2023-36558
A security feature bypass vulnerability was found in Blazor forms in ASP.NET in the .NET package. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability t...
CVE-2023-36049
A vulnerability was found in FormatFtpCommand in the .NET package that may result in a CRLF injection arbitrary file write and deletion. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease...
Malicious Package
Overview yandex-net is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
GO-2022-0211 Incorrect parsing validation in net/url
The url.Parse function accepts URLs with malformed hosts, such that the Host field can have arbitrary suffixes that appear in neither Hostname nor Port, allowing authorization bypasses in certain applications...