Логотип exploitDog
bind:CVE-2020-25681
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2020-25681

Количество 17

Количество 17

ubuntu логотип

CVE-2020-25681

больше 4 лет назад

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overflow with arbitrary data in a heap memory segment, possibly executing code on the machine. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS3: 8.1
EPSS: Средний
redhat логотип

CVE-2020-25681

больше 4 лет назад

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overflow with arbitrary data in a heap memory segment, possibly executing code on the machine. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS3: 8.1
EPSS: Средний
nvd логотип

CVE-2020-25681

больше 4 лет назад

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overflow with arbitrary data in a heap memory segment, possibly executing code on the machine. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS3: 8.1
EPSS: Средний
msrc логотип

CVE-2020-25681

больше 4 лет назад

CVSS3: 8.1
EPSS: Средний
debian логотип

CVE-2020-25681

больше 4 лет назад

A flaw was found in dnsmasq before version 2.83. A heap-based buffer o ...

CVSS3: 8.1
EPSS: Средний
github логотип

GHSA-34v3-rp23-947c

больше 3 лет назад

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overflow with arbitrary data in a heap memory segment, possibly executing code on the machine. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

EPSS: Средний
fstec логотип

BDU:2021-01117

больше 4 лет назад

Уязвимость функции sort_rrset() DNS-сервера dnsmasq, связанная с переполнением буфера в динамической памяти, позволяющая нарушителю выполнить произвольный код

CVSS3: 8.1
EPSS: Средний
oracle-oval логотип

ELSA-2023-12972

почти 2 года назад

ELSA-2023-12972: dnsmasq security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2023-12971

почти 2 года назад

ELSA-2023-12971: dnsmasq security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:0129-1

больше 4 лет назад

Security update for dnsmasq

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:0124-1

больше 4 лет назад

Security update for dnsmasq

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:14604-1

больше 4 лет назад

Security update for dnsmasq

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:0166-1

больше 4 лет назад

Security update for dnsmasq

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:0163-1

больше 4 лет назад

Security update for dnsmasq

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:0162-1

больше 4 лет назад

Security update for dnsmasq

EPSS: Низкий
oracle-oval логотип

ELSA-2021-0150

больше 4 лет назад

ELSA-2021-0150: dnsmasq security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:14603-1

больше 4 лет назад

Security update for dnsmasq

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2020-25681

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overflow with arbitrary data in a heap memory segment, possibly executing code on the machine. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS3: 8.1
24%
Средний
больше 4 лет назад
redhat логотип
CVE-2020-25681

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overflow with arbitrary data in a heap memory segment, possibly executing code on the machine. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS3: 8.1
24%
Средний
больше 4 лет назад
nvd логотип
CVE-2020-25681

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overflow with arbitrary data in a heap memory segment, possibly executing code on the machine. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS3: 8.1
24%
Средний
больше 4 лет назад
msrc логотип
CVSS3: 8.1
24%
Средний
больше 4 лет назад
debian логотип
CVE-2020-25681

A flaw was found in dnsmasq before version 2.83. A heap-based buffer o ...

CVSS3: 8.1
24%
Средний
больше 4 лет назад
github логотип
GHSA-34v3-rp23-947c

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overflow with arbitrary data in a heap memory segment, possibly executing code on the machine. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

24%
Средний
больше 3 лет назад
fstec логотип
BDU:2021-01117

Уязвимость функции sort_rrset() DNS-сервера dnsmasq, связанная с переполнением буфера в динамической памяти, позволяющая нарушителю выполнить произвольный код

CVSS3: 8.1
24%
Средний
больше 4 лет назад
oracle-oval логотип
ELSA-2023-12972

ELSA-2023-12972: dnsmasq security update (IMPORTANT)

почти 2 года назад
oracle-oval логотип
ELSA-2023-12971

ELSA-2023-12971: dnsmasq security update (IMPORTANT)

почти 2 года назад
suse-cvrf логотип
openSUSE-SU-2021:0129-1

Security update for dnsmasq

больше 4 лет назад
suse-cvrf логотип
openSUSE-SU-2021:0124-1

Security update for dnsmasq

больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2021:14604-1

Security update for dnsmasq

больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2021:0166-1

Security update for dnsmasq

больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2021:0163-1

Security update for dnsmasq

больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2021:0162-1

Security update for dnsmasq

больше 4 лет назад
oracle-oval логотип
ELSA-2021-0150

ELSA-2021-0150: dnsmasq security update (IMPORTANT)

больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2021:14603-1

Security update for dnsmasq

больше 4 лет назад

Уязвимостей на страницу