Lucene search
K

17 matches found

Redos
Redos
added 2023/07/06 12:0 a.m.39 views

ROS-2-618

2.618 Multiple vulnerabilities in ISC BIND CVE-2021-25216, CVE-2021-25215, CVE-2021-25214 1. Vulnerability Description: CVE-2021-25216 A vulnerability exists due to a boundary error in the GSS-TSIG extension. A remote attacker can send specially crafted requests to the server, trigger a buffer...

9.8CVSS8.7AI score0.27744EPSS
Exploits0
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.22 views

Mageia: Security Advisory (MGASA-2021-0275)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.5AI score0.02257EPSS
Exploits0References5
Redos
Redos
added 2021/09/08 12:0 a.m.15 views

ROS-2-1277

2.1277 Multiple vulnerabilities in ISC BIND CVE-2021-25216, CVE-2021-25215, CVE-2021-25214 1. Vulnerability Description: CVE-2021-25216 A vulnerability exists due to a boundary error in the GSS-TSIG extension. A remote attacker can send specially crafted requests to the server, trigger a buffer...

9.8CVSS10AI score0.63116EPSS
Exploits3
RedHat Linux
RedHat Linux
added 2021/08/31 9:22 a.m.3 views

bind: Broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly

Incremental zone transfers IXFR provide a way of transferring changed portions of a zone between servers. An IXFR stream containing SOA records with an owner name other than the transferred zone's apex may cause the receiving named server to inadvertently remove the SOA record for the zone in...

6.5CVSS7.2AI score0.02257EPSS
Exploits0References5
Mageia
Mageia
added 2021/06/23 5:11 p.m.37 views

Updated bind packages fix a security vulnerability

Incremental zone transfers IXFR provide a way of transferring changed portions of a zone between servers. An IXFR stream containing SOA records with an owner name other than the transferred zone's apex may cause the receiving named server to inadvertently remove the SOA record for the zone in...

6.5CVSS2.6AI score0.02257EPSS
Exploits0References3
Amazon
Amazon
added 2021/06/23 12:0 a.m.33 views

Medium: bind

Issue Overview: Incremental zone transfers IXFR provide a way of transferring changed portions of a zone between servers. An IXFR stream containing SOA records with an owner name other than the transferred zone's apex may cause the receiving named server to inadvertently remove the SOA record for...

6.5CVSS8.1AI score0.02257EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2021/04/30 12:0 a.m.29 views

ISC BIND Malformed IXFR DoS (CVE-2021-25214)

According to its self-reported version, the ISC Bind present on the remote host is affected by a denial of service vulnerability: - Incremental zone transfers IXFR provide a way of transferring changed portions of a zone between servers. An IXFR stream containing SOA records with an owner name...

6.5CVSS7.3AI score0.02257EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/04/30 12:0 a.m.18 views

ISC BIND DoS Vulnerability (CVE-2021-25214) - Linux

ISC BIND is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

6.5CVSS7.1AI score0.02257EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2021/04/29 3:48 a.m.40 views

CVE-2021-25214

Incremental zone transfers IXFR provide a way of transferring changed portions of a zone between servers. An IXFR stream containing SOA records with an owner name other than the transferred zone's apex may cause the receiving named server to inadvertently remove the SOA record for the zone in...

6.5CVSS7AI score0.02257EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/04/29 12:0 a.m.4 views

ISC BIND 安全漏洞

ISC BIND is a suite of open source software that implements the DNS protocol from ISC USA. A security vulnerability exists in ISC BIND that causes the receiving named server to inadvertently delete SOA records for problematic zones from the zone database...

6.5CVSS7AI score0.02257EPSS
Exploits0References34
OSV
OSV
added 2020/06/18 3:15 p.m.0 views

UBUNTU-CVE-2017-9103

An issue was discovered in adns before 1.5.2. papmailbox822 does not properly check st from adnsfindlabelnext. Without this, an uninitialised stack value can be used as the first label length. Depending on the circumstances, an attacker might be able to trick adns into crashing the calling progra...

9.8CVSS7.3AI score0.0067EPSS
Exploits0References3
Prion
Prion
added 2020/06/18 3:15 p.m.17 views

Buffer overflow

An issue was discovered in adns before 1.5.2. papmailbox822 does not properly check st from adnsfindlabelnext. Without this, an uninitialised stack value can be used as the first label length. Depending on the circumstances, an attacker might be able to trick adns into crashing the calling progra...

7.5CVSS9.1AI score0.0067EPSS
Exploits0References6Affected Software3
OSV
OSV
added 2019/08/02 1:15 p.m.0 views

CVE-2017-18382

cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records SEC-306...

2.7CVSS5.8AI score
Exploits0References2
Cvelist
Cvelist
added 2019/08/02 12:19 p.m.10 views

CVE-2017-18382

cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records SEC-306...

3.9AI score0.00252EPSS
Exploits0References1
CVE
CVE
added 2019/08/02 12:19 p.m.44 views

CVE-2017-18382

CVE-2017-18382 affects cPanel prior to 68.0.15, where DNS zone SOA records can contain an unreserved email address (SEC-306). Root cause: the vulnerability arises from how the SOA RDATA handles the email field. Impact: CVSS3 base score 2.7 (LOW); confidentiality impact LOW, no integrity/availabil...

4CVSS4.2AI score0.00252EPSS
Exploits0References2Affected Software1
Kitploit
Kitploit
added 2014/05/12 8:3 p.m.10 views

Tilt - Terminal Ip Lookup Tool

Tilt: Terminal ip lookup tool, is an easy and simple open source tool implemented in Python for ip/host passive reconnaissance. It's very handy for first reconnaissance approach and for host data retrieval. Features Host to IP conversion IP to Host conversion DNS to IPs GeoIP Translation Extensiv...

7AI score
Exploits0References2
securityvulns
securityvulns
added 2007/05/12 12:0 a.m.40 views

ISC BIND named DoS

DoS on SOA records processing if recursion is enabled...

7.1CVSS2.6AI score0.03461EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder