7373 matches found
CVE-2022-33989
dproxy-nexgen aka dproxy nexgen uses a static UDP source port selected randomly only at boot time in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection attacks...
CVE-2022-34294
totd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection attacks...
CVE-2022-34294
The CVE-2022-34294 entry concerns totd 1.5.3, a small DNS proxy nameserver. The issue is that upstream DNS queries use a fixed UDP source port, providing insufficient entropy and enabling DNS cache poisoning. Affected component: totd 1.5.3. Root cause: fixed UDP source port in upstream queries to...
CVE-2022-34294
totd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection attacks...
PT-2022-21951 · Unknown · Dproxy-Nexgen
Name of the Vulnerable Software and Affected Versions: dproxy-nexgen affected versions not specified Description: The issue allows DNS cache poisoning due to the use of a static UDP source port with insufficient entropy to prevent traffic injection attacks. This occurs because dproxy-nexgen selec...
Here’s a Simple Script to Detect the Stealthy Nation-State BPFDoor
In this blog, the Qualys Research Team explains the mechanics of a Linux malware variant named BPFdoor. We then demonstrate the efficacy of Qualys Custom Assessment and Remediation to detect it, and Qualys Multi-Vector EDR to protect against it. BPFDoor is a Linux/Unix backdoor that allows threat...
Fedora: Security Advisory for netscanner (FEDORA-2022-5038c3236c)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GSD-2022-1004667 udp: Fix a data-race around sysctl_udp_l3mdev_accept.
udp: Fix a data-race around sysctludpl3mdevaccept. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.208 by commit...
GSD-2022-1004521 udp: Fix a data-race around sysctl_udp_l3mdev_accept.
udp: Fix a data-race around sysctludpl3mdevaccept. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.134 by commit...
GSD-2022-1004334 udp: Fix a data-race around sysctl_udp_l3mdev_accept.
udp: Fix a data-race around sysctludpl3mdevaccept. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.58 by commit...
GSD-2022-1004109 udp: Fix a data-race around sysctl_udp_l3mdev_accept.
udp: Fix a data-race around sysctludpl3mdevaccept. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...
[SECURITY] Fedora 36 Update: netscanner-0-0.6.20201116git8baab36.fc36
A TCP/UDP scanner to find open or closed ports...
CVE-2022-30319
Saia Burgess Controls SBC PCD through 2022-05-06 allows Authentication bypass. According to FSCT-2022-0062, there is a Saia Burgess Controls SBC PCD S-Bus authentication bypass issue. The affected components are characterized as: S-Bus 5050/UDP authentication. The potential impact is:...
Authentication flaw
Saia Burgess Controls SBC PCD through 2022-05-06 allows Authentication bypass. According to FSCT-2022-0062, there is a Saia Burgess Controls SBC PCD S-Bus authentication bypass issue. The affected components are characterized as: S-Bus 5050/UDP authentication. The potential impact is:...
CVE-2022-30319
CVE-2022-30319 describes an authentication bypass in Saia Burgess Controls (SBC) PCD using the S-Bus protocol (UDP port 5050) through 2022-05-06. The underlying issue is a MAC/IP whitelist-based access control that can be bypassed by spoofing UDP traffic, since UDP is stateless; an attacker obser...
CVE-2022-30319
Saia Burgess Controls SBC PCD through 2022-05-06 allows Authentication bypass. According to FSCT-2022-0062, there is a Saia Burgess Controls SBC PCD S-Bus authentication bypass issue. The affected components are characterized as: S-Bus 5050/UDP authentication. The potential impact is:...
CVE-2022-30319
Saia Burgess Controls SBC PCD through 2022-05-06 allows Authentication bypass. According to FSCT-2022-0062, there is a Saia Burgess Controls SBC PCD S-Bus authentication bypass issue. The affected components are characterized as: S-Bus 5050/UDP authentication. The potential impact is:...
Google Adds Support for DNS-over-HTTP/3 in Android to Keep DNS Queries Private — The Hacker News
Google on Tuesday officially announced support for DNS-over-HTTP/3 DoH3 for Android devices as part of a Google Play system update designed to keep DNS queries private. To that end, Android smartphones running Android 11 and higher are expected to use DoH3 instead of DNS-over-TLS DoT, which was...
Fedora: Security Advisory for netscanner (FEDORA-2022-3969b64d4b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...