NSEC3-Encloser-Attack

NSEC3-Encloser-Attack Zonefile 생성 이 프로젝트는 CVE-2023-50868의 공격을 재현하고 평가하기 위해 사용자 정의 NSEC3 매개변수로 DNS zonefile을 생성합니다. 요구 사항 Python3 Python3.10에서 테스트됨 설치된 Python 종속성: cryptography 42.0.5 dnspython 2.6.1 구성 요소 lib: Python 유틸리티, 포함: keys.py: 키를 파일에 로드/저장하기 위한 래퍼 함수 nsec.py: DNSSEC NSEC 해시 구현 dnssec.py:...

UBUNTU-CVE-2026-77955

In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones zonemd-check: yes which are located below but not at a trust anchor allow for an attack window where tampered with zone contents are served or stored to disk prior to the ZONEMD integrity check. Th...

CVE-2026-77955

In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones zonemd-check: yes which are located below but not at a trust anchor allow for an attack window where tampered with zone contents are served or stored to disk prior to the ZONEMD integrity check. Th...

CVE-2026-77955

NLnet Labs Unbound versions 1.13.2 through 1.26.1 are affected by a timing window in ZONEMD verification for zones configured with zonemd-check: yes located below (but not at) a trust anchor. The root cause is the asynchronous DS/DNSKEY resolution required before the ZONEMD integrity check comple...

PT-2026-93369

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.13.2 through 1.26.1 Description Zones configured with zonemd-check: yes that are located below a trust anchor contain a flaw where tampered zone contents may be served or stored to disk before the ZONEMD integrity...

CVE-2026-77955: Insufficient Verification of Data Authenticity

In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones zonemd-check: yes which are located below but not at a trust anchor allow for an attack window where tampered with zone contents are served or stored to disk prior to the ZONEMD integrity check. Th...

EUVD-2024-21619

Malicious code in bioql PyPI...

EUVD-2024-21616

Malicious code in bioql PyPI...

CVE-2024-24195

robdns commit d76d2e6 was discovered to contain a misaligned address at /src/zonefile-insertion.c...

CVE-2024-24192

robdns commit d76d2e6 was discovered to contain a heap overflow via the component block-filename at /src/zonefile-insertion.c...

CVE-2024-24192

robdns commit d76d2e6 was discovered to contain a heap overflow via the component block-filename at /src/zonefile-insertion.c...

CVE-2024-24195

robdns commit d76d2e6 was discovered to contain a misaligned address at /src/zonefile-insertion.c...

CVE-2024-24195

robdns commit d76d2e6 was discovered to contain a misaligned address at /src/zonefile-insertion.c...

CVE-2024-24195

CVE-2024-24195 affects robdns via a misaligned address introduced in commit d76d2e6 at /src/zonefile-insertion.c. The issue is tracked with a CVSSv3.1 base score of 7.5 (HIGH), with NETWORK attack vector, LOW attack complexity, no privileges required, and a HIGH impact on availability (I=N, A=H; ...

CVE-2024-24195

robdns commit d76d2e6 was discovered to contain a misaligned address at /src/zonefile-insertion.c...

CVE-2024-24192

CVE-2024-24192 affects robdns, with a heap overflow in the code path handling block->filename in /src/zonefile-insertion.c (version d76d2e6). Multiple connected sources corroborate the issue and identify the vulnerable component as block->filename and the function zonefile-insertion.c. PT-2...

CVE-2024-24192

robdns commit d76d2e6 was discovered to contain a heap overflow via the component block-filename at /src/zonefile-insertion.c...

PT-2024-20314 · Robdns · Robdns

Name of the Vulnerable Software and Affected Versions: robdns version d76d2e6 Description: A misaligned address was discovered in the robdns commit d76d2e6 at the /src/zonefile-insertion.c location. Recommendations: For version d76d2e6, consider updating to a newer version that contains a fix for...

robdns security breach

robdns is a dns service. A security vulnerability exists in robdns, which originates from the inclusion of unaligned addresses in /src/zonefile-insertion.c...

PT-2024-20312 · Robdns · Robdns

Name of the Vulnerable Software and Affected Versions: robdns version d76d2e6 Description: A heap overflow was discovered in robdns via the component block-filename at /src/zonefile-insertion.c. Recommendations: For version d76d2e6, consider restricting access to the vulnerable component...