Lucene search
+L

3345 matches found

Positive Technologies
Positive Technologies
added 2019/12/16 12:00 a.m.16 views

PT-2019-15812 · Cz.Nic +2 · Knot Resolver +2

Name of the Vulnerable Software and Affected Versions: knot-resolver versions prior to 4.3.0 Description: The issue allows for denial of service through high CPU utilization. This occurs when DNS replies contain a large number of resource records, which can be processed inefficiently. In extreme...

7.5CVSS6.8AI score0.02619EPSS
SaveExploits1References25
OpenVAS
OpenVAS
added 2019/12/15 12:00 a.m.42 views

Fedora Update for knot-resolver FEDORA-2019-44ccfa9b29

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.02166EPSS
SaveExploits1References2
Fedora
Fedora
added 2019/12/13 1:04 a.m.37 views

[SECURITY] Fedora 30 Update: knot-resolver-4.3.0-1.fc30

The Knot Resolver is a DNSSEC-enabled caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is...

7.5CVSS2.6AI score0.02166EPSS
SaveExploits1
Fedora
Fedora
added 2019/12/13 1:04 a.m.50 views

[SECURITY] Fedora 30 Update: bind-9.11.13-2.fc30

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

7.5CVSS1.4AI score0.06457EPSS
SaveExploits0
Fedora
Fedora
added 2019/12/13 12:55 a.m.38 views

[SECURITY] Fedora 31 Update: knot-resolver-4.3.0-1.fc31

The Knot Resolver is a DNSSEC-enabled caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is...

7.5CVSS2.6AI score0.02166EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2019/12/13 12:00 a.m.80 views

Fedora 30 : knot-resolver (2019-44ccfa9b29)

update to upstream version 4.3.0 - fixes CVE-2019-19331 - root.keys is moved to /var/lib/knot-resolver - knot-resolver no longer requires write permission to /etc/knot-resolver/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

7.5CVSS7.2AI score0.02166EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2019/12/13 12:00 a.m.72 views

Fedora 31 : knot-resolver (2019-866dc03603)

update to upstream version 4.3.0 - fixes CVE-2019-19331 - root.keys is moved to /var/lib/knot-resolver - knot-resolver no longer requires write permission to /etc/knot-resolver/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

7.5CVSS7.2AI score0.02166EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2019/12/10 12:00 a.m.43 views

EulerOS 2.0 SP2 : NetworkManager (EulerOS-SA-2019-2371)

According to the version of the NetworkManager packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure CWE-200 vulnerability in DNS resolver that can result in...

7.5CVSS6.5AI score0.0202EPSS
SaveExploits0References2
Symantec
Symantec
added 2019/12/04 12:00 a.m.61 views

CZ.NIC Knot Resolver CVE-2019-19331 Denial of Service Vulnerability

Description CZ.NIC Knot Resolver is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause denial-of-service condition. Knot Resolver versions prior to 4.3.0 are vulnerable. Technologies Affected CZ.NIC labs Knot Resolver 2.0.0 CZ.NIC labs Knot Resolver 2.1.0...

1.2AI score0.02166EPSS
SaveExploits1References4
OSV
OSV
added 2019/11/28 3:48 p.m.11 views

SUSE-SU-2019:3097-1 Security update for cloud-init

This update for cloud-init to version 19.2 fixes the following issues: Security issue fixed: - CVE-2019-0816: Fixed the unnecessary extra ssh keys that were added to authorizedkeys bsc1129124. Non-security issues fixed: - Short circuit the conditional for identifying the sysconfig renderer...

5.1CVSS5.2AI score0.01403EPSS
SaveExploits0References9
OpenVAS
OpenVAS
added 2019/11/26 12:00 a.m.390 views

Unbound DNS Resolver 1.6.4 - 1.9.4 RCE Vulnerability

Unbound DNS Resolver is prone to a remote code execution RCE vulnerability under certain conditions. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

7.3CVSS7.1AI score0.03212EPSS
SaveExploits1References1
OSV
OSV
added 2019/11/19 9:16 p.m.15 views

MGASA-2019-0330 Updated systemd packages fix security vulnerability

Updated systemd packages fix security vulnerability: Nadav Markus from Palo Alto Networks discovered that systemd-resolved does not enforce appropriate access controls on its D-Bus interface and allows unprivileged users to execute methods that are meant to be available only to privileged users...

4.4CVSS4.8AI score0.00511EPSS
SaveExploits1References4
Mageia
Mageia
added 2019/11/19 9:16 p.m.49 views

Updated systemd packages fix security vulnerability

Updated systemd packages fix security vulnerability: Nadav Markus from Palo Alto Networks discovered that systemd-resolved does not enforce appropriate access controls on its D-Bus interface and allows unprivileged users to execute methods that are meant to be available only to privileged users...

4.4CVSS2.9AI score0.00511EPSS
SaveExploits1References3
OSV
OSV
added 2019/11/13 6:15 p.m.10 views

CVE-2019-2205

In ProxyResolverV8::SetPacScript of proxyresolverv8.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0...

9.8CVSS7.8AI score0.02864EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/11/12 12:00 a.m.38 views

EulerOS 2.0 SP8 : systemd (EulerOS-SA-2019-2121)

According to the version of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In systemd 240, busopensystemwatchbindwithdescription in shared/bus-util.c as used by systemd-resolved to connect to the system D-Bus instance,...

4.4CVSS6.1AI score0.00511EPSS
SaveExploits1References2
Fedora
Fedora
added 2019/11/11 1:07 a.m.43 views

[SECURITY] Fedora 31 Update: unbound-1.9.4-1.fc31

Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...

7.5CVSS3AI score0.03506EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2019/11/10 12:00 a.m.33 views

Fedora Update for unbound FEDORA-2019-e99b716a92

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.7AI score0.03506EPSS
SaveExploits0References2
Fedora
Fedora
added 2019/11/09 10:40 p.m.38 views

[SECURITY] Fedora 30 Update: unbound-1.9.4-1.fc30

Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...

7.5CVSS3AI score0.03506EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2019/10/24 12:00 a.m.67 views

Unbound DNS Resolver < 1.9.4 DoS Vulnerability

Unbound DNS Resolver is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS6.4AI score0.03506EPSS
SaveExploits0References1
Akamai Blog
Akamai Blog
added 2019/10/21 4:00 p.m.48 views

All Resolvers Aren't Equal - Don't Worry, GTM is Aware

What is GTM Global Traffic Management, or GTM, is a DNS-based load balancing service that offers application owners a level of flexibility and insight that is unmatched by traditional on-prem solutions. Highly scalable and fault-resilient, GTM offers customers a layer of abstraction between...

SaveExploits0
Rows per page
Query Builder