5663 matches found
CVE-2016-6173
NSD before 4.1.11 allows remote DNS master servers to cause a denial of service /tmp disk consumption and slave server crash via a zone transfer with unlimited data...
CVE-2016-6173
NSD before 4.1.11 allows remote DNS master servers to cause a denial of service /tmp disk consumption and slave server crash via a zone transfer with unlimited data...
CVE-2016-6173: Undefined Security Weakness
NSD before 4.1.11 allows remote DNS master servers to cause a denial of service /tmp disk consumption and slave server crash via a zone transfer with unlimited data...
PT-2017-8922
Name of the Vulnerable Software and Affected Versions Knot DNS versions prior to 2.3.0 Description The issue allows remote DNS servers to cause a denial of service, resulting in memory exhaustion and slave server crash. This can be achieved via a large zone transfer for DDNS, AXFR, or IXFR...
UBUNTU-CVE-2017-3135
Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 - 9.9.9-S7, 9.9.3 - 9.9.9-P5, 9.9.10b1,...
CVE-2016-6171: Uncontrolled Resource Consumption
Knot DNS before 2.3.0 allows remote DNS servers to cause a denial of service memory exhaustion and slave server crash via a large zone transfer for 1 DDNS, 2 AXFR, or 3 IXFR...
PT-2017-8923
Name of the Vulnerable Software and Affected Versions NSD versions prior to 4.1.11 Description The issue allows remote DNS master servers to cause a denial of service, resulting in /tmp disk consumption and slave server crash, via a zone transfer with unlimited data. Recommendations For versions...
FreeBSD : powerdns -- multiple vulnerabilities (e3200958-dd6c-11e6-ae1b-002590263bf5)
PowerDNS reports : 2016-02: Crafted queries can cause abnormal CPU usage 2016-03: Denial of service via the web server 2016-04: Insufficient validation of TSIG signatures 2016-05: Crafted zone record can cause a denial of service %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...
Buffer overflow
Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking. Product: Android. Versions: Kernel 3.18. Android ID: A-31625204. References: QC-CR1027804...
CVE-2016-8439
Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking. Product: Android. Versions: Kernel 3.18. Android ID: A-31625204. References: QC-CR1027804...
CVE-2016-8439
Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking. Product: Android. Versions: Kernel 3.18. Android ID: A-31625204. References: QC-CR1027804...
CVE-2016-8439
CVE-2016-8439 is an Android vulnerability describing a possible buffer overflow in the trust zone access control API due to insufficient buffer size checking. The connected NVD entry lists affected software as Android kernel 3.18, with Android ID A-31625204, indicating the root cause lies in a bu...
CVE-2016-8439
Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking. Product: Android. Versions: Kernel 3.18. Android ID: A-31625204. References: QC-CR1027804...
CVE-2016-9778
An error in handling certain queries can cause an assertion failure when a server is using the nxdomain-redirect feature to cover a zone for which it is also providing authoritative service. A vulnerable server could be intentionally stopped by an attacker if it was using a configuration that met...
CVE-2016-8439: Improper Restriction of Operations within the Bounds of a Memory Buffer
Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking. Product: Android. Versions: Kernel 3.18. Android ID: A-31625204. References: QC-CR1027804...
PT-2017-1103
Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is related to a possible buffer overflow in the trust zone access control API due to the lack of buffer size checking. This may allow a remote attacker to cause a buffer overflo...
Alvosec: [ns2.████] Vulnerable to DNS Zone Transfer
This server is misconfigured, as a result allowed the consultant to initiate a zone transfer the following shows the output: ██████████. 3600 IN SOA ns1.██████████. webmaster.█████. 2017041813 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ███. 3600 IN A ██████████ █████. 3600 IN...
ISC BIND 9 db.c Assertion Failure Denial of Service Vulnerability
BIND is a suite of open source software for implementing the DNS protocol. A db.c assertion failure denial of service vulnerability exists in ISC BIND 9. When an authoritative server overrides a zone using the nxdomain-redirect feature, an attacker can cause an assertion failure resulting in a...
Important: Red Hat Security Advisory: rh-nodejs4-nodejs and rh-nodejs4-http-parser security update
An update for rh-nodejs4-nodejs and rh-nodejs4-http-parser is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
V8: integer overflow leading to buffer overflow in Zone::New
An integer-overflow flaw was found in V8's Zone class when allocating new memory Zone::New and Zone::NewExpand. An attacker with the ability to manipulate a large zone could crash the application or, potentially, execute arbitrary code with the application privileges...