By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution s ...
Continue Reading
September 21, 2022
The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process.Read More ...
Continue Reading
September 21, 2022
An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless the ...
Continue Reading
September 21, 2022
By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where ...
Continue Reading
September 21, 2022
By sending specific queries to the resolver, an attacker can cause named to crash.Read More ...
Continue Reading
September 21, 2022
In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.Read More ...
Continue Reading
September 21, 2022
In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's `/confirm` endpoint.Read More ...
Continue Reading
September 21, 2022
Database Software Accreditation Tracking/Presentation Module product before version 2 has an unauthenticated SQL Injection vulnerability. This is fixed in version 2.Read More ...
Continue Reading
September 21, 2022
Back to Main
