19 matches found
CVE-2026-93008
A flaw was found in dnsmasq. When following a CNAME in a DNS response, the resolver can cache records for the CNAME target without checking that those records belong to the responding server's authorized zone. In split-DNS deployments that send some domains to a specific upstream, an attacker who...
CVE-2026-93008 Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations
A flaw was found in dnsmasq. When following a CNAME in a DNS response, the resolver can cache records for the CNAME target without checking that those records belong to the responding server's authorized zone. In split-DNS deployments that send some domains to a specific upstream, an attacker who...
EUVD-2026-112787
A flaw was found in dnsmasq. When following a CNAME in a DNS response, the resolver can cache records for the CNAME target without checking that those records belong to the responding server's authorized zone. In split-DNS deployments that send some domains to a specific upstream, an attacker who...
CVE-2026-93008
A flaw in dnsmasq allows for out-of-bailiwick cache injection during a CNAME chase in split-DNS configurations. The resolver may cache records for a CNAME target without verifying if they belong to the responding server's authorized zone. If an attacker controls an upstream server used in a split...
CVE-2026-93008
A flaw was found in dnsmasq. When following a CNAME in a DNS response, the resolver can cache records for the CNAME target without checking that those records belong to the responding server's authorized zone. In split-DNS deployments that send some domains to a specific upstream, an attacker who...
EUVD-2020-24679
Malware in sbrugna...
Cisco IOS Software Split DNS DoS (cisco-sa-splitdns-SPWqpdGW)
According to its self-reported version, Cisco IOS Software is affected by a denial of service DoS vulnerability as the Split DNS feature's regular expression regex engine may time out when processing the DNS name list configuration. An unauthenticated, remote attacker could cause an affected devi...
Cisco IOS XE Software Split DNS DoS (cisco-sa-splitdns-SPWqpdGW)
According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability as the Split DNS feature's regular expression regex engine may time out when processing the DNS name list configuration. An unauthenticated, remote attacker could cause an affected...
Cisco IOS and IOS XE Denial of Service Vulnerability (CNVD-2021-43438)
Cisco IOS and IOS XE are both operating systems developed by Cisco in the United States for its network devices. A denial of service vulnerability exists in the Split DNS feature of Cisco IOS and IOS XE, which can be exploited by an attacker to cause a device to reload by attempting to resolve th...
CVE-2020-3408
A vulnerability in the Split DNS feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability occurs because the regular expression regex engine that...
CVE-2020-3408
A vulnerability in the Split DNS feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability occurs because the regular expression regex engine that...
Race condition
A vulnerability in the Split DNS feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability occurs because the regular expression regex engine that...
CVE-2020-3408 Cisco IOS and IOS XE Software Split DNS Denial of Service Vulnerability
A vulnerability in the Split DNS feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability occurs because the regular expression regex engine that...
CVE-2020-3408
CVE-2020-3408 concerns Cisco IOS and IOS XE Split DNS DoS. The issue stems from the Split DNS feature’s regex engine timing out while processing the DNS name list configuration, allowing an unauthenticated, remote attacker to trigger device reloads and a denial-of-service condition. Affected prod...
CVE-2020-3408 Cisco IOS and IOS XE Software Split DNS Denial of Service Vulnerability
A vulnerability in the Split DNS feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability occurs because the regular expression regex engine that...
Cisco IOS and IOS XE Software Split DNS Denial of Service Vulnerability
A vulnerability in the Split DNS feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability occurs because the regular expression regex engine that...
CVE-2020-3408: Incorrect Regular Expression
A vulnerability in the Split DNS feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability occurs because the regular expression regex engine that...
Description of the security update for Microsoft Exchange: December 12, 2017
Description of the security update for Microsoft Exchange: December 12, 2017 Applies To Exchange Server 2013 Enterprise Edition Exchange Server 2013 SP1 Exchange Server 2016 Enterprise Edition Summary This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The...
Description of the security update for Microsoft Exchange: September 12, 2017
Description of the security update for Microsoft Exchange: September 12, 2017 Applies To Exchange Server 2013 SP1 Exchange Server 2016 Enterprise Edition Exchange Server 2013 Enterprise Edition Exchange Server 2013 Standard Edition Notice Security update package 4045655 was released to address a...