584 matches found
SUSE-SU-2026:4086-1 Security update for perl-Net-DNS
This update for perl-Net-DNS fixes the following issue: - CVE-2026-81928: memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record bsc1278084...
Security update for perl-Net-DNS
This update for perl-Net-DNS fixes the following issue: CVE-2026-81928: memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record bsc1278084. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
Security update for perl-Net-DNS
This update for perl-Net-DNS fixes the following issue: CVE-2026-81928: memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record bsc1278084. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
SUSE-SU-2026:4065-1 Security update for perl-Net-DNS
This update for perl-Net-DNS fixes the following issue: - CVE-2026-81928: memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record bsc1278084...
glibc security update
2.39-128.0.1 - Forward port Oracle changes to 2.39-128. - Reviewed-by: Elena Zannoni Oracle history: Jul-15-2026 Cupertino Miranda - 2.39-126.0.1 - Forward port Oracle changes to 2.39-126. - Reviewed-by: Jose E. Marchesi Jul-15-2026 Cupertino Miranda - 2.39-124.0.1 - Forward port Oracle changes t...
Oracle Linux 10 : glibc (ELSA-2026-42694)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42694 advisory. - CVE-2026-5425: Fix out-of-bounds write via TSIG record processing RHEL-180652, RHEL-185612 Tenable has extracted the preceding description block...
SUSE CVE-2026-81928
Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...
EUVD-2026-69727
Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...
CVE-2026-81928
Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...
DEBIAN-CVE-2026-81928
Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...
The vulnerability of the TSIG authentication algorithm used by the coredns server allows attackers to increase their privileges.
The vulnerability of the TSIG authentication algorithm used by coredns DNS servers is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
CVE-2026-81928: Uncontrolled Recursion
Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...
Linux Distros Unpatched Vulnerability : CVE-2026-81928
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigda...
CVE-2026-81928 Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record
Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...
CVE-2026-81928
The Net::DNS Perl module (versions before 1.57 ) is vulnerable to a Denial of Service (DoS) via memory exhaustion . The root cause is unbounded recursion in sig_data occurring when re-encoding a message that contains a misplaced TSIG record in the answer or authority section. While the decoder wa...
CVE-2026-81928
Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...
PT-2026-84543
Name of the Vulnerable Software and Affected Versions Net::DNS versions prior to 1.57 Description Memory exhaustion can occur due to unbounded recursion in the sig data function when re-encoding a message containing a misplaced TSIG Transaction Signature record. The sig data function signs a...
K000163143: Multiple CoreDNS vulnerabilities CVE-2026-35579, CVE-2026-33489, CVE-2026-33190, CVE-2026-32934, CVE-2026-32936
Security Advisory Description CVE-2026-35579 CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QUIC, DoH, and DoH3 transport implementations incorrectly handle TSIG authentication. For gRPC and QUIC, the server checks whether the TSIG key name exists in the configurati...
Amazon Linux 2 : samba, --advisory ALAS2-2026-3886 (ALAS-2026-3886)
The version of samba installed on the remote host is prior to 4.10.16-24. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3886 advisory. A flaw was found in samba's pamwinbind. When mkhomedir is enabled, pamwinbind chowns the target account's home directory...
The vulnerability of the tsig DNS server plugin from coredns allows attackers to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of the tsig DNS server plugin from coredns is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information...