Page 5 of 51 results (0.013 seconds)

CVSS: 7.8EPSS: 1%CPEs: 1EXPL: 0

CVE-2016-6173

https://notcve.org/view.php?id=CVE-2016-6173

09 Feb 2017 — NSD before 4.1.11 allows remote DNS master servers to cause a denial of service (/tmp disk consumption and slave server crash) via a zone transfer with unlimited data. NSD en versiones anteriores a 4.1.11 permite a servidores DNS maestros remotos provocar una denegación de servicio (/tmp consumo de disco y caída del servidor esclavo) a través de una trasferencia de zona con datos ilimitados.. • http://www.nlnetlabs.nl/svn/nsd/tags/NSD_4_1_11_REL/doc/RELNOTES • CWE-399: Resource Management Errors •

CVSS: 7.5EPSS: 10%CPEs: 4EXPL: 0

CVE-2014-8602 – unbound: specially crafted request can lead to denial of service

https://notcve.org/view.php?id=CVE-2014-8602

11 Dec 2014 — iterator.c in NLnet Labs Unbound before 1.5.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a large or infinite number of referrals. iterator.c en NLnet Labs Unbound anterior a 1.5.1 no limita el encadenamiento de la delegación, lo que permite a atacantes remotos causar una denegación de servicio (consumo de memoria y CPU) a través de un número grande o infinito de remisiones. A denial of service flaw was found in unbound that... • http://cert.ssi.gouv.fr/site/CERTFR-2014-AVI-512/index.html • CWE-399: Resource Management Errors CWE-770: Allocation of Resources Without Limits or Throttling •

CVSS: 5.5EPSS: 0%CPEs: 12EXPL: 0

CVE-2014-3209 – Mandriva Linux Security Advisory 2014-085

https://notcve.org/view.php?id=CVE-2014-3209

12 May 2014 — The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file. La herramienta Idns-keygen en Idns 1.6.x utiliza la umask actual para configurar los privilegios de la clave privada, lo que podría permitir a usuarios locales obtener la clave privada mediante la lectura del archivo. Leon Weber discovered that the ldns-keygen tool incorrectly set permissions on private keys. A local attacker could p... • http://www.openwall.com/lists/oss-security/2014/05/03/2 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 7.5EPSS: 1%CPEs: 21EXPL: 0

CVE-2012-2978

https://notcve.org/view.php?id=CVE-2012-2978

27 Jul 2012 — query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via a crafted DNS packet. query.c en NSD v3.0.x hasta v3.0.8, v3.1.x hasta v3.1.1, y v3.2.x antes de v3.2.12 permite a atacantes remotos causar una denegación de servicio (eliminar la referencia del puntero NULL y caída en un proceso hijo) a través de un paquete DNS modificado. • http://osvdb.org/84097 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.8EPSS: 4%CPEs: 26EXPL: 0

CVE-2011-3581 – Gentoo Linux Security Advisory 201401-25

https://notcve.org/view.php?id=CVE-2011-3581

04 Nov 2011 — Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns before 1.6.11 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Resource Record (RR) with an unknown type containing input that is longer than a specified length. Desboramiento de buffer basado en memoria dinámica en la función ldns_rr_new_frm_str_internal en ldns antes de v1.6.11, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar ... • http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068091.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.5EPSS: 0%CPEs: 30EXPL: 0

CVE-2009-4008

https://notcve.org/view.php?id=CVE-2009-4008

02 Jun 2011 — Unbound before 1.4.4 does not send responses for signed zones after mishandling an unspecified query, which allows remote attackers to cause a denial of service (DNSSEC outage) via a crafted query. Unbound, antes de v1.4.4 no envía respuestas para las zonas firmadas después de un mal manejo de una consulta no especificada, lo que permite a atacantes remotos provocar una denegación de servicio (falta de DNSSEC) a través de una consulta hecha a mano. • http://packages.debian.org/changelogs/pool/main/u/unbound/unbound_1.4.6-1/changelog • CWE-399: Resource Management Errors •

CVSS: 7.5EPSS: 1%CPEs: 22EXPL: 0

CVE-2011-1922

https://notcve.org/view.php?id=CVE-2011-1922

31 May 2011 — daemon/worker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DNS request that triggers improper error handling. daemon/worker.c de Unbound 1.x anteriores a 1.4.10, cuando la funcionalidad de depuración de errores ("debugging") y la opción de "interface-automatic" están activadas, permite a atacantes remotos provocar una denegación de servicio (f... • http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061243.html • CWE-399: Resource Management Errors •

CVSS: 7.5EPSS: 1%CPEs: 29EXPL: 0

CVE-2010-0969

https://notcve.org/view.php?id=CVE-2010-0969

16 Mar 2010 — Unbound before 1.4.3 does not properly align structures on 64-bit platforms, which allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors. Unbound anterior v1.4.3 no alinea adecuadamente estructuras en plataformas 64-bit, lo que permite a atacantes remotos causar una denegación de servicio (caída de demonio) a través de vectores no especificados. • http://bugs.gentoo.org/show_bug.cgi?id=309117 • CWE-399: Resource Management Errors •

CVSS: 7.5EPSS: 1%CPEs: 25EXPL: 0

CVE-2009-3602

https://notcve.org/view.php?id=CVE-2009-3602

13 Oct 2009 — Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS spoofing or other DNS-related attacks in conjunction with crafted delegation responses. Unbound anterior v1.3.4 no comprueba las firmas para registros NSEC3, lo que permite a atacantes remotos causar una delegación de seguridad para ser descargada a través de suplantación de DNS u otros ataques relativos al DNS conjuntamente con respuestas de delegaci... • http://osvdb.org/58836 • CWE-310: Cryptographic Issues •

CVSS: 9.8EPSS: 1%CPEs: 31EXPL: 0

CVE-2009-1755

https://notcve.org/view.php?id=CVE-2009-1755

22 May 2009 — Off-by-one error in the packet_read_query_section function in packet.c in nsd 3.2.1, and process_query_section in query.c in nsd 2.3.7, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a buffer overflow. Error de superación del límite en la función packet_read_query_section en packet.c en nsd v3.2.1, y process_query_section en query.c en nsd v2.3.7, permite a atacantes remotos provocar una denegación de servicio (caída) y p... • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529418 • CWE-189: Numeric Errors •