cisco catalyst 9800 firmware vulnerabilities and exploits

(subscribe to this query)

8.3

CVSSv2

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow exists in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buff...

Thekelleys Dnsmasq Fedoraproject Fedora 32 Fedoraproject Fedora 33 Debian Debian Linux 9.0 Debian Debian Linux 10.0

1 Article

8.3

CVSSv2

A flaw was found in dnsmasq prior to 2.83. A buffer overflow vulnerability exists in the way dnsmasq extract names from DNS packets before validating them with DNSSEC data. An attacker on the network, who can create valid DNS replies, could use this flaw to cause an overflow with...

Thekelleys Dnsmasq Fedoraproject Fedora 32 Fedoraproject Fedora 33 Debian Debian Linux 9.0 Debian Debian Linux 10.0

1 Article

7.1

CVSSv2

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow exists in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. A remote attacker, who can create valid DNS replies, could use this flaw to cause an overflow in a heap-allocat...

Thekelleys Dnsmasq Fedoraproject Fedora 32 Fedoraproject Fedora 33 Debian Debian Linux 9.0 Debian Debian Linux 10.0

1 Article

4.3

CVSSv2

A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:reply_query() if the reply destination address/port is used by the pending forwarded queries. However, it does not use the address/port to retrieve the ex...

Thekelleys Dnsmasq Fedoraproject Fedora 32 Fedoraproject Fedora 33 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Arista Eos

2 Github repositories1 Article

4.3

CVSSv2

A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:reply_query(), which is the forwarded query that matches the reply, by only using a weak hash of the query name. Due to the weak hash (CRC32 when dnsmasq is c...

Thekelleys Dnsmasq Fedoraproject Fedora 32 Fedoraproject Fedora 33 Debian Debian Linux 10.0 Arista Eos

2 Github repositories1 Article

4.3

CVSSv2

A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a new request. By default, a maximum of 150 pending queries can be sent to upstream servers, so there can be at most 150 ...

Thekelleys Dnsmasq Fedoraproject Fedora 32 Fedoraproject Fedora 33 Debian Debian Linux 10.0 Arista Eos

2 Github repositories1 Article

7.1

CVSSv2

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow exists in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. This flaw allows a remote attacker, who can create valid DNS replies, to cause an overflow in a heap-allocated ...

Thekelleys Dnsmasq Fedoraproject Fedora 32 Fedoraproject Fedora 33 Debian Debian Linux 9.0 Debian Debian Linux 10.0

1 Article

7.2

CVSSv2

A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local malicious user to write a modified firmware image to the component. This vulnerability affects mul...

2 Articles

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook