cve-2015-7547-public

PoC attack server for CVE-2015-7547 vulnerability in glibc DNS stub resolver To test on local machine with a vulnerable glibc version: user@localhost:/$ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/$ echo 'nameserver 127.0.0.127' | sudo tee -a /etc/resolv.conf...

cve-2026-5950-bind9-resolver-dos

CVE-2026-5950 - BIND 9 Resolver DoS Research notes and defensive guidance for CVE-2026-5950, an unbounded resend loop vulnerability in the BIND 9 resolver state machine. Overview CVE-2026-5950 affects recursive BIND 9 resolvers. Under specific retry and bad-server handling conditions, a remote...

CVE-2026-77157

ast-cli downloads two helper binaries, the Vorpal ASCA real-time engine and the SCA Resolver, from "download.checkmarx.com" as part of its auto-update flow, triggered by the Checkmarx’s "VSCode/JetBrains" extensions and by cx scan "sca-realtime". Prior to the fix, the downloaded archive was not...

SUSE CVE-2026-96888

A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing the redirect. This issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.16.8-S1 through 9.18.50-S1...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

DEBIAN-CVE-2026-96888

A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing the redirect. This issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.16.8-S1 through 9.18.50-S1...

CVE-2026-96888

A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing the redirect. This issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.16.8-S1 through 9.18.50-S1...

CVE-2026-96888

A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing the redirect. This issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.16.8-S1 through 9.18.50-S1...

CVE-2026-96888

The BIND resolver is vulnerable to a reachable assertion failure (CWE-617) and potential NULL pointer dereference (CWE-476) when configured with both a "redirect" zone and "qname-minimization strict" . This flaw can cause the Named service to terminate unexpectedly during redirect processing. Imp...

EUVD-2026-107255

A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing the redirect. This issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.16.8-S1 through 9.18.50-S1...

CVE-2026-96888 Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization

A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing the redirect. This issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.16.8-S1 through 9.18.50-S1...

CVE-2026-77630

A flaw was found in libupnp. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by submitting requests containing slow or non-responsive hostnames. Because the library performs synchronous network address lookups on attacker-supplied hostnames, worker...

EUVD-2026-105989

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-dns-resolver-round-robin. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via DNS to compromise...

CVE-2026-105482

Node.js dns.resolve and the dns promises resolver accept names containing NUL characters and pass them to c-ares as C strings, so the queried name is silently truncated at the NUL byte. Fixed in 22.23.4, 24.22.1 and 26.12.1...

PT-2026-120595

A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing the redirect. This issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.16.8-S1 through 9.18.50-S1...

Linux Distros Unpatched Vulnerability : CVE-2026-96888

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A BIND resolver that is configured with both a redirect zone and qname-minimization strict may abort with an assertion failure while processing the redirect. Th...

CVE-2026-101581

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-dns-resolver-round-robin. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via DNS to compromise...

CVE-2026-101581

The Helidon product of Oracle Fusion Middleware is affected by a vulnerability in the helidon-webclient-dns-resolver-round-robin component. This issue impacts supported versions 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via DNS can exploit this vulnerability to comp...

glibc security update

An update is available for glibc. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The glibc packages provide the standard C libraries libc, POSIX thread librari...