376 matches found
Validation Bypass
PowerDNS Recursor is vulnerable validation bypass. The answer section of a NXDOMAIN response lacking an SOA is not properly validated in SyncRes::processAnswer, allowing an attacker to bypass DNSSEC validation...
Buffer overflow
An issue was discovered in adns before 1.5.2. papmailbox822 does not properly check st from adnsfindlabelnext. Without this, an uninitialised stack value can be used as the first label length. Depending on the circumstances, an attacker might be able to trick adns into crashing the calling progra...
UBUNTU-CVE-2017-9103
An issue was discovered in adns before 1.5.2. papmailbox822 does not properly check st from adnsfindlabelnext. Without this, an uninitialised stack value can be used as the first label length. Depending on the circumstances, an attacker might be able to trick adns into crashing the calling progra...
CVE-2017-9103
CVE-2017-9103 affects adns before 1.5.2. The issue: pap_mailbox822 does not properly check st from adns__findlabel_next, allowing an uninitialized stack value to be used as the first label length. This can cause a crash, memory leakage, excessive memory allocation, or buffer overruns, depending o...
CVE-2017-9103
An issue was discovered in adns before 1.5.2. papmailbox822 does not properly check st from adnsfindlabelnext. Without this, an uninitialised stack value can be used as the first label length. Depending on the circumstances, an attacker might be able to trick adns into crashing the calling progra...
CVE-2017-9106
CVE-2017-9106 affects adns up to version 1.5.1 (before 1.5.2). The issue lies in adns_rr_info handling a bogus datap where integer formatting uses a fixed-size buffer; if input is out of the permitted range, a buffer overrun can occur due to sign extension of SOA 32-bit integers. The result is a ...
PT-2020-8501 · Adns +2 · Adns +2
Name of the Vulnerable Software and Affected Versions: adns versions prior to 1.5.2 Description: An issue in pap mailbox822 does not properly check st from adns findlabel next, potentially allowing an attacker to crash the program, leak memory contents, allocate excessive memory, or overrun a...
[SECURITY] [DSA 4691-1] pdns-recursor security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4691-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 21, 2020 https://www.debian.org/security/faq -...
PT-2020-6913
Name of the Vulnerable Software and Affected Versions c-ares versions 1 16 1 through 1 17 0 Description The issue is related to a buffer overflow vulnerability in the ares parse soa reply function of the c-ares library, which handles asynchronous DNS requests. This vulnerability can be exploited ...
CVE-2020-12244
An issue has been found in PowerDNS Recursor 4.1.0 through 4.3.0 where records in the answer section of a NXDOMAIN response lacking an SOA were not properly validated in SyncRes::processAnswer, allowing an attacker to bypass DNSSEC validation...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect ITCAM for SOA (Jan 2020)
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 6/7 used by ITCAM for SOA. ITCAM for SOA has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-2604 DESCRIPTION: An unspecified vulnerability in Java SE could allow an unauthenticated attacker ...
Security Bulletin: Vulnerabilities disclosed by OpenSSL project on August 6, 2014 that impact DataPower (CVE-2014-3508 and CVE-2014-3511)
Summary There were multiple vulnerabilities disclosed on August 6, 2014 by the OpenSSL Project. Two of them impact DataPower appliances. Vulnerability Details CVE-ID: CVE-2014-3508 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in OBJobj2txt...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect ITCAM for SOA
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 6/7 used by ITCAM for SOA. ITCAM for SOA has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-2989 DESCRIPTION: An unspecified vulnerability in Java SE could allow an unauthenticated attacker ...
CVE-2012-5626
EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform 4.2, 4.3, and 5; in Red Hat JBoss Enterprise Web Server 1 ignores roles specified using the @RunAs annotation...
CVE-2012-5626
EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform 4.2, 4.3, and 5; in Red Hat JBoss Enterprise Web Server 1 ignores roles specified using the @RunAs annotation...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect ITCAM for SOA
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 6/7 used by ITCAM for SOA. ITCAM for SOA has addressed the applicable CVEs. Vulnerability Details If you run your own Java code using the IBM Java Runtime delivered with this product, you should evaluate your cod...
CVE-2017-18382
cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records SEC-306...
CVE-2017-18382
cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records SEC-306...