Lucene search
+L

584 matches found

OSV
OSV
•added 2026/09/08 10:22 a.m.•9 views

SUSE-SU-2026:4086-1 Security update for perl-Net-DNS

This update for perl-Net-DNS fixes the following issue: - CVE-2026-81928: memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record bsc1278084...

5.9AI score0.00585EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
•added 2026/09/08 10:22 a.m.•13 views

Security update for perl-Net-DNS

This update for perl-Net-DNS fixes the following issue: CVE-2026-81928: memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record bsc1278084. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

5.3CVSS5.9AI score0.00585EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/09/08 7:03 a.m.•14 views

Security update for perl-Net-DNS

This update for perl-Net-DNS fixes the following issue: CVE-2026-81928: memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record bsc1278084. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

5.3CVSS5.9AI score0.00585EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/08 7:03 a.m.•10 views

SUSE-SU-2026:4065-1 Security update for perl-Net-DNS

This update for perl-Net-DNS fixes the following issue: - CVE-2026-81928: memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record bsc1278084...

5.9AI score0.00585EPSS
SaveExploits0References3
Oracle linux
Oracle linux
•added 2026/09/07 12:00 a.m.•11 views

glibc security update

2.39-128.0.1 - Forward port Oracle changes to 2.39-128. - Reviewed-by: Elena Zannoni Oracle history: Jul-15-2026 Cupertino Miranda - 2.39-126.0.1 - Forward port Oracle changes to 2.39-126. - Reviewed-by: Jose E. Marchesi Jul-15-2026 Cupertino Miranda - 2.39-124.0.1 - Forward port Oracle changes t...

7.5CVSS7.1AI score0.00493EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2026/09/07 12:00 a.m.•14 views

Oracle Linux 10 : glibc (ELSA-2026-42694)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42694 advisory. - CVE-2026-5425: Fix out-of-bounds write via TSIG record processing RHEL-180652, RHEL-185612 Tenable has extracted the preceding description block...

7.5CVSS7AI score0.00493EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
•added 2026/09/02 11:31 a.m.•18 views

SUSE CVE-2026-81928

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...

5.3CVSS5.8AI score0.00585EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/02 12:31 a.m.•17 views

EUVD-2026-69727

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...

5.8AI score0.00585EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/02 12:18 a.m.•11 views

CVE-2026-81928

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...

7.5CVSS0.00585EPSS
SaveExploits0References6
OSV
OSV
•added 2026/09/02 12:18 a.m.•11 views

DEBIAN-CVE-2026-81928

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...

7.5CVSS5.8AI score0.00585EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/09/02 12:00 a.m.•11 views

The vulnerability of the TSIG authentication algorithm used by the coredns server allows attackers to increase their privileges.

The vulnerability of the TSIG authentication algorithm used by coredns DNS servers is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

10CVSS7.2AI score0.00753EPSS
SaveExploits1References4Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/02 12:00 a.m.•3 views

CVE-2026-81928: Uncontrolled Recursion

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...

7.5CVSS5.8AI score0.00585EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/02 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-81928

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigda...

5.8AI score0.00585EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/01 11:14 p.m.•48 views

CVE-2026-81928 Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...

0.00585EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/01 11:14 p.m.•39 views

CVE-2026-81928

The Net::DNS Perl module (versions before 1.57 ) is vulnerable to a Denial of Service (DoS) via memory exhaustion . The root cause is unbounded recursion in sig_data occurring when re-encoding a message that contains a misplaced TSIG record in the answer or authority section. While the decoder wa...

5.8AI score0.00585EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2026/09/01 11:14 p.m.•13 views

CVE-2026-81928

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...

5.8AI score0.00585EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/01 12:00 a.m.•22 views

PT-2026-84543

Name of the Vulnerable Software and Affected Versions Net::DNS versions prior to 1.57 Description Memory exhaustion can occur due to unbounded recursion in the sig data function when re-encoding a message containing a misplaced TSIG Transaction Signature record. The sig data function signs a...

7.5CVSS5.8AI score0.00585EPSS
SaveExploits0References42
F5 Networks
F5 Networks
•added 2026/08/31 7:55 a.m.•16 views

K000163143: Multiple CoreDNS vulnerabilities CVE-2026-35579, CVE-2026-33489, CVE-2026-33190, CVE-2026-32934, CVE-2026-32936

Security Advisory Description CVE-2026-35579 CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QUIC, DoH, and DoH3 transport implementations incorrectly handle TSIG authentication. For gRPC and QUIC, the server checks whether the TSIG key name exists in the configurati...

9.8CVSS7AI score0.00753EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
•added 2026/08/31 12:00 a.m.•19 views

Amazon Linux 2 : samba, --advisory ALAS2-2026-3886 (ALAS-2026-3886)

The version of samba installed on the remote host is prior to 4.10.16-24. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3886 advisory. A flaw was found in samba's pamwinbind. When mkhomedir is enabled, pamwinbind chowns the target account's home directory...

8.8CVSS5.8AI score0.00803EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
•added 2026/08/24 12:00 a.m.•19 views

The vulnerability of the tsig DNS server plugin from coredns allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the tsig DNS server plugin from coredns is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information...

7.8CVSS5.4AI score0.00525EPSS
SaveExploits1References7Affected Software2
Rows per page
Query Builder