Lucene search
K

11 matches found

Cvelist
Cvelist
added 2026/06/10 6:37 a.m.40 views

CVE-2026-10846 Insufficient verification that responses belong to a query

NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as stub resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the query ID, neither the question of the query is matched with that of t...

8.2CVSS0.00147EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/06/10 6:37 a.m.7 views

CVE-2026-10846 Insufficient verification that responses belong to a query

NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as stub resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the query ID, neither the question of the query is matched with that of t...

8.2CVSS5.4AI score0.00147EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2026/06/10 6:37 a.m.7 views

CVE-2026-10846

NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as stub resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the query ID, neither the question of the query is matched with that of t...

8.2CVSS5.8AI score0.00147EPSS
Exploits0References2
OSV
OSV
added 2026/06/09 4:0 p.m.4 views

UBUNTU-CVE-2026-10846

NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as stub resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the query ID, neither the question of the query is matched with that of t...

8.2CVSS5.3AI score0.00147EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/01 2:15 p.m.3 views

CVE-2026-43047

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Check to ensure report responses match the request It is possible for a malicious or clumsy device to respond to a specific report's feature request using a completely different report ID. This can cause confusio...

7.8CVSS5.8AI score0.0012EPSS
Exploits0References9Affected Software1
NVD
NVD
added 2026/04/22 2:16 p.m.5 views

CVE-2026-33596

A client might theoretically be able to cause a mismatch between queries sent to a backend and the received responses by sending a flood of perfectly timed queries that are routed to a TCP-only or DNS over TLS backend...

6.5CVSS0.00169EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/22 1:47 p.m.3 views

CVE-2026-33596 TCP backend stream ID overflow

A client might theoretically be able to cause a mismatch between queries sent to a backend and the received responses by sending a flood of perfectly timed queries that are routed to a TCP-only or DNS over TLS backend...

3.1CVSS5.7AI score0.00169EPSS
Exploits0References1
OSV
OSV
added 2026/01/30 4:36 p.m.1 views

CLEANSTART-2026-QD78411 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

9.8CVSS5.6AI score0.00579EPSS
Exploits1References5
OSV
OSV
added 2026/01/30 3:50 p.m.2 views

CLEANSTART-2026-EJ58111 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00579EPSS
Exploits2References14
Positive Technologies
Positive Technologies
added 2025/08/06 12:0 a.m.4 views

PT-2025-32156 · Emby · Mediabrowser

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: The vulnerability involves an observable response discrepancy. This issue relates to a mismatch in the expected and actual responses from a system or application. Recommendations: At the moment,...

7.5CVSS6.4AI score0.00291EPSS
Exploits0References4
OSV
OSV
added 2020/12/11 11:15 p.m.2 views

CVE-2020-25109

An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The number of DNS queries/responses set in a DNS header is not checked against the data present. This may lead to successful Denial-of-Service, and possibly Remote Code Execution...

9.8CVSS7.4AI score0.52259EPSS
Exploits0References2
Rows per page
Query Builder