Lucene search
K

14 matches found

OSV
OSV
added 2024/06/06 5:15 p.m.19 views

CVE-2024-33655

The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service resource consumption by arranging for DNS queries to be accumulated for seconds, such that responses are later sent in a pulsing burst which can be considered traffic amplification in some cases, aka the...

7.5CVSS6.3AI score0.02775EPSS
Exploits0References15
AlpineLinux
AlpineLinux
added 2024/06/06 12:0 a.m.54 views

CVE-2024-33655

The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service resource consumption by arranging for DNS queries to be accumulated for seconds, such that responses are later sent in a pulsing burst which can be considered traffic amplification in some cases, aka the...

7.5CVSS6.3AI score0.02775EPSS
Exploits0
CVE
CVE
added 2024/06/06 12:0 a.m.431 views

CVE-2024-33655

CVE-2024-33655 affects Unbound, a validating, recursive DNS resolver. Documented details describe DNSBomb: remote attackers can trigger denial of service by accumulating DNS queries so responses burst later, potentially enabling amplification. Multiple advisories reference mitigation via updating...

7.5CVSS6.9AI score0.02775EPSS
Exploits0References15
Vulnrichment
Vulnrichment
added 2024/06/06 12:0 a.m.40 views

CVE-2024-33655

The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service resource consumption by arranging for DNS queries to be accumulated for seconds, such that responses are later sent in a pulsing burst which can be considered traffic amplification in some cases, aka the...

6.8AI score0.02775EPSS
Exploits0References12
Debian CVE
Debian CVE
added 2024/06/06 12:0 a.m.61 views

CVE-2024-33655

The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service resource consumption by arranging for DNS queries to be accumulated for seconds, such that responses are later sent in a pulsing burst which can be considered traffic amplification in some cases, aka the...

7.5CVSS7AI score0.02775EPSS
Exploits0
OSV
OSV
added 2022/02/17 5:33 p.m.42 views

GO-2021-0239 Improper sanitization when resolving values from DNS in net

The LookupCNAME, LookupSRV, LookupMX, LookupNS, and LookupAddr functions and their respective methods on the Resolver type may return arbitrary values retrieved from DNS which do not follow the established RFC 1035 rules for domain names. If these names are used without further sanitization, for...

7.5CVSS7.8AI score0.00031EPSS
Exploits1References4
Prion
Prion
added 2021/03/29 8:15 p.m.16 views

Buffer overflow

In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 when processing a DNSSL option, rtsold8 decodes domain name labels per an encoding specified in RFC 1035 in which the first octet of each label contains th...

10CVSS9.5AI score0.00477EPSS
Exploits0References2Affected Software1
Kitploit
Kitploit
added 2013/12/31 10:8 p.m.236 views

[Ghost Phisher v1.5] GUI suite for phishing and penetration attacks

Ghost Phisher is an application of security which comes built-in with a fake DNS server ,DHCP server fake, fake HTTP Server and also has a space for the automatic capture and recording credentials HTTP method of the form to a database. The program could be used for on-demand service of DHCP, DNS,...

7.5AI score
Exploits0
OpenVAS
OpenVAS
added 2013/02/28 12:0 a.m.9 views

Nmap NSE 6.01: ntp-info

Gets the time and configuration variables from an NTP server. We send two requests: a time request and a 'read variables' opcode 2 control message. Without verbosity, the script shows the time and the value of the 'version', 'processor', 'system', 'refid', and 'stratum' variables. With verbosity,...

7.3AI score
Exploits0
Nmap
Nmap
added 2009/12/12 10:42 p.m.1673 views

ntp-info NSE Script

Gets the time and configuration variables from an NTP server. We send two requests: a time request and a "read variables" opcode 2 control message. Without verbosity, the script shows the time and the value of the version, processor, system, refid, and stratum variables. With verbosity, all...

10CVSS0.1AI score0.94176EPSS
Exploits33
Fedora
Fedora
added 2007/07/02 3:2 p.m.9 views

[SECURITY] Fedora Core 6 Update: perl-Net-DNS-0.60-1.fc6

Net::DNS is a collection of Perl modules that act as a Domain Name System DNS resolver. It allows the programmer to perform DNS queries that are beyond the capabilities of gethostbyname and gethostbyaddr. The programmer should be somewhat familiar with the format of a DNS packet and its various...

2.6AI score
Exploits0
Fedora
Fedora
added 2007/07/02 3:2 p.m.16 views

[SECURITY] Fedora Core 5 Update: perl-Net-DNS-0.60-1.fc5

Net::DNS is a collection of Perl modules that act as a Domain Name System DNS resolver. It allows the programmer to perform DNS queries that are beyond the capabilities of gethostbyname and gethostbyaddr. The programmer should be somewhat familiar with the format of a DNS packet and its various...

2.6AI score
Exploits0
Fedora
Fedora
added 2007/06/25 11:52 p.m.12 views

[SECURITY] Fedora 7 Update: perl-Net-DNS-0.60-1.fc7

Net::DNS is a collection of Perl modules that act as a Domain Name System DNS resolver. It allows the programmer to perform DNS queries that are beyond the capabilities of gethostbyname and gethostbyaddr. The programmer should be somewhat familiar with the format of a DNS packet and its various...

2.8AI score
Exploits0
securityvulns
securityvulns
added 2006/11/27 12:0 a.m.46 views

iDefense Security Advisory 11.26.06: Qbik WinGate Compressed Name Pointer Denial of Service Vulnerability

Qbik WinGate Compressed Name Pointer Denial of Service Vulnerability iDefense Security Advisory 11.26.06 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 26, 2006 I. BACKGROUND Qbik WinGate is an Internet gateway and communications server. It includes functionality related to efficientl...

5CVSS0.3AI score0.01498EPSS
Exploits0
Rows per page
Query Builder