SAD DNS — New Flaws Re-Enable DNS Cache Poisoning Attacks

🗓️ 13 Nov 2020 07:12:00Reported by The Hacker NewsType

A novel SAD DNS attack enables off-path rerouting to carry out DNS cache poisoning, affecting major operating systems and public DNS resolver

Reporter	Title	Published	Views	Family All 397
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a kernel vulnerability (CVE-2020-25705, CVE-2020-28374)	4 Nov 202115:59	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in the Linux Kernel used in IBM Elastic Storage System	19 May 202109:52	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux Kernel, Docker, Python, and NGINX affect IBM Spectrum Protect Plus	10 Dec 202118:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	5 May 202105:44	–	ibm
IBM Security Bulletins	Security Bulletin: This Power System update is being released to address CVE 2020-25705	7 Dec 202114:16	–	ibm
IBM Security Bulletins	Security Bulletin: UDP source port randomization flaw in IBM DataPower Gateway (CVE-2020-25705)	16 Dec 202218:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by a Kernel vulnerability (CVE-2020-25705)	22 Dec 202217:30	–	ibm
GithubExploit	Exploit for Use of Insufficiently Random Values in Linux Linux_Kernel	14 Nov 202008:53	–	githubexploit
Tenable Nessus	AlmaLinux 8 : kernel (ALSA-2021:0558)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 7 : kernel (RHSA-2021:0856)	18 Mar 202100:00	–	nessus

13 Nov 2020 07:12Current

7.3High risk

Vulners AI Score7.3

CVSS 25.8

CVSS 3.17.4

EPSS0.06692