22 matches found
NSEC3-Encloser-Attack
NSEC3-Encloser-Attack Генерация зонных файлов Этот проект генерирует DNS-зонные файлы с пользовательскими параметрами NSEC3 для воспроизведения и оценки атак, описанных в CVE-2023-50868. Требования Python3 протестировано на Python3.10 Установленные зависимости Python: cryptography 42.0.5 dnspytho...
UBUNTU-CVE-2026-77955
In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones zonemd-check: yes which are located below but not at a trust anchor allow for an attack window where tampered with zone contents are served or stored to disk prior to the ZONEMD integrity check. Th...
CVE-2026-77955
NLnet Labs Unbound versions 1.13.2 through 1.26.1 are affected by a timing window in ZONEMD verification for zones configured with zonemd-check: yes located below (but not at) a trust anchor. The root cause is the asynchronous DS/DNSKEY resolution required before the ZONEMD integrity check comple...
CVE-2026-77955
In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones zonemd-check: yes which are located below but not at a trust anchor allow for an attack window where tampered with zone contents are served or stored to disk prior to the ZONEMD integrity check. Th...
PT-2026-93369
Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.13.2 through 1.26.1 Description Zones configured with zonemd-check: yes that are located below a trust anchor contain a flaw where tampered zone contents may be served or stored to disk before the ZONEMD integrity...
CVE-2026-77955: Insufficient Verification of Data Authenticity
In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones zonemd-check: yes which are located below but not at a trust anchor allow for an attack window where tampered with zone contents are served or stored to disk prior to the ZONEMD integrity check. Th...
EUVD-2024-21619
Malicious code in bioql PyPI...
EUVD-2024-21616
Malicious code in bioql PyPI...
CVE-2024-24195
robdns commit d76d2e6 was discovered to contain a misaligned address at /src/zonefile-insertion.c...
CVE-2024-24192
robdns commit d76d2e6 was discovered to contain a heap overflow via the component block-filename at /src/zonefile-insertion.c...
CVE-2024-24192
robdns commit d76d2e6 was discovered to contain a heap overflow via the component block-filename at /src/zonefile-insertion.c...
CVE-2024-24195
robdns commit d76d2e6 was discovered to contain a misaligned address at /src/zonefile-insertion.c...
CVE-2024-24195
robdns commit d76d2e6 was discovered to contain a misaligned address at /src/zonefile-insertion.c...
CVE-2024-24195
CVE-2024-24195 affects robdns via a misaligned address introduced in commit d76d2e6 at /src/zonefile-insertion.c. The issue is tracked with a CVSSv3.1 base score of 7.5 (HIGH), with NETWORK attack vector, LOW attack complexity, no privileges required, and a HIGH impact on availability (I=N, A=H; ...
CVE-2024-24195
robdns commit d76d2e6 was discovered to contain a misaligned address at /src/zonefile-insertion.c...
CVE-2024-24192
CVE-2024-24192 affects robdns, with a heap overflow in the code path handling block->filename in /src/zonefile-insertion.c (version d76d2e6). Multiple connected sources corroborate the issue and identify the vulnerable component as block->filename and the function zonefile-insertion.c. PT-2...
CVE-2024-24192
robdns commit d76d2e6 was discovered to contain a heap overflow via the component block-filename at /src/zonefile-insertion.c...
PT-2024-20314 · Robdns · Robdns
Name of the Vulnerable Software and Affected Versions: robdns version d76d2e6 Description: A misaligned address was discovered in the robdns commit d76d2e6 at the /src/zonefile-insertion.c location. Recommendations: For version d76d2e6, consider updating to a newer version that contains a fix for...
PT-2024-20312 · Robdns · Robdns
Name of the Vulnerable Software and Affected Versions: robdns version d76d2e6 Description: A heap overflow was discovered in robdns via the component block-filename at /src/zonefile-insertion.c. Recommendations: For version d76d2e6, consider restricting access to the vulnerable component...
