1526 matches found
UBUNTU-CVE-2020-25685
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:replyquery, which is the forwarded query that matches the reply, by only using a weak hash of the query name. Due to the weak hash CRC32 when dnsmasq is compiled without DNSSE...
UBUNTU-CVE-2020-25684
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:replyquery if the reply destination address/port is used by the pending forwarded queries. However, it does not use the address/port to retrieve the exact forwarded query,...
Prototype Pollution
ioredis is vulnerable to prototype pollution. The vulnerability exists as the reply transformer does not check for special field names and mishandles malicious keys proto, which could, at worst, result in a denial of service condition due to limitations of not being able to overwrite global...
CVE-2020-17443
An issue was discovered in picoTCP 1.7.0. The code for creating an ICMPv6 echo replies doesn't check whether the ICMPv6 echo request packet's size is shorter than 8 bytes. If the size of the incoming ICMPv6 request packet is shorter than this, the operation that calculates the size of the ICMPv6...
c-ares: ares_parse_{a,aaaa}_reply() insufficient naddrttls validation DoS
A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions 15.2.1, 14.15.1, and 12.19.1 by getting the application to resolve a DNS record with a larger number of responses. This is fixed in 15.2.1, 14.15.1, and...
Security update for MozillaThunderbird (moderate)
openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2020:2133-1 Rating: moderate References: 1178611 Cross-References: CVE-2020-26950 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update f...
QEMU: slirp: networking out-of-bounds read information disclosure vulnerability
An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6sendechoreply routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of the host memory,...
CVE-2017-10388
It was discovered that the Kerberos client implementation in the Libraries component of OpenJDK used the sname field from the plain text part rather than encrypted part of the KDC reply message. A man-in-the-middle attacker could possibly use this flaw to impersonate Kerberos services to Java...
QEMU: slirp: networking out-of-bounds read information disclosure vulnerability
An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6sendechoreply routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of the host memory,...
EulerOS Virtualization for ARM 64 3.0.6.0 : libXrandr (EulerOS-SA-2020-2005)
According to the versions of the libXrandr package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - X.org libXrandr before 1.5.1 allows remote X servers to trigger out-of-bounds write operations by leveraging...
The Linux kernel when using IPv6 allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent as demonstrated by thcping.
...
In QEMU 5.0.0 and earlier megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user.
...
SUSE SLES12 Security Update : perl-PlRPC (SUSE-SU-2020:2238-1)
This update for perl-PlRPC fixes the following issues : Security notice: bsc858243, CVE-2013-7284 - Document security vulnerability on Storable and reply attack Add perl-PlRPC-CVE-2013-7284.patch Note that Tenable Network Security has extracted the preceding description block directly from the SU...
DEBIAN-CVE-2020-17446
asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...
Amplification Attacks
PowerDNS Recursor is vulnerable toamplification attacks. It does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious parties to use recursive DNS services to attack third party authoritative name servers. The attack uses a crafte...
UBUNTU-CVE-2020-10756
An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6sendechoreply routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of the host memory,...
Unspecified Vulnerability in Mattermost Mobile Apps (CNVD-2020-35185)
Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. A security vulnerability exists in Mattermost Mobile Apps versions prior to 1.26.0 that stems from the Quick Reply feature failing to properly handle specially crafted recoveries. No details of the vulnerability are...
CVE-2019-20848
An issue was discovered in Mattermost Mobile Apps before 1.26.0. The Quick Reply feature mishandles crafted replies...
