Записи thekelleys
39 опубликованных записей вендора thekelleys.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 4
- С записью об исправлении
- 82,1 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-787 Out-of-bounds Write8
- CWE-20 Improper Input Validation5
- CWE-122 Heap-based Buffer Overflow5
- CWE-358 Improperly Implemented Security Check for Standard4
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer3
- CWE-770 Allocation of Resources Without Limits or Throttling2
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
39 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
67На этой неделе | CVE-2017-14492Proof of concept | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code viacanonical · ubuntu linux · CWE-119 | Критическая9,8 | — | 94,4 % | 2 окт. 2017 г. |
65На этой неделе | CVE-2017-14491Proof of concept | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code viathekelleys · dnsmasq · CWE-787 | Критическая9,8 | — | 86,4 % | 3 окт. 2017 г. |
65На этой неделе | CVE-2017-14493Proof of concept | Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code vicanonical · ubuntu linux · CWE-119 | Критическая9,8 | — | 85,2 % | 2 окт. 2017 г. |
60На этой неделе | CVE-2023-50387Proof of concept | Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of serredhat · enterprise linux · CWE-770 | Высокая7,5 | — | 99,9 % | 14 февр. 2024 г. |
57В плане | CVE-2020-25681Эксплойта нет | A flaw was found in dnsmasq before version 2.83.thekelleys · dnsmasq · CWE-122 | Высокая8,1 | — | 84,0 % | 20 янв. 2021 г. |
56В плане | CVE-2017-14495Proof of concept | Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause acanonical · ubuntu linux · CWE-772 | Высокая7,5 | — | 85,4 % | 2 окт. 2017 г. |
55В плане | CVE-2020-25682Эксплойта нет | A flaw was found in dnsmasq before 2.83.thekelleys · dnsmasq · CWE-122 | Высокая8,1 | — | 75,0 % | 20 янв. 2021 г. |
51В плане | CVE-2017-14496Proof of concept | Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specicanonical · ubuntu linux · CWE-191 | Высокая7,5 | — | 68,4 % | 2 окт. 2017 г. |
50В плане | CVE-2020-25687Эксплойта нет | A flaw was found in dnsmasq before version 2.83.thekelleys · dnsmasq · CWE-122 | Средняя5,9 | — | 89,2 % | 20 янв. 2021 г. |
50В плане | CVE-2020-25683Эксплойта нет | A flaw was found in dnsmasq before version 2.83.thekelleys · dnsmasq · CWE-122 | Средняя5,9 | — | 88,7 % | 20 янв. 2021 г. |
50В плане | CVE-2017-13704Эксплойта нет | In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value.canonical · ubuntu linux · CWE-20 | Высокая7,5 | — | 65,4 % | 2 окт. 2017 г. |
44В плане | CVE-2017-14494Proof of concept | dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handlicanonical · ubuntu linux · CWE-200 | Средняя5,9 | — | 70,4 % | 2 окт. 2017 г. |
40В плане | CVE-2021-45953Эксплойта нет | Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from hash_questions and fuzz_util.c).thekelleys · dnsmasq · CWE-787 | Критическая9,8 | — | 2,7 % | 31 дек. 2021 г. |
40В плане | CVE-2021-45956Эксплойта нет | Dnsmasq 2.86 has a heap-based buffer overflow in print_mac (called from log_packet and dhcp_reply).thekelleys · dnsmasq · CWE-787 | Критическая9,8 | — | 2,7 % | 31 дек. 2021 г. |
40В плане | CVE-2021-45954Эксплойта нет | Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from answer_auth and FuzzAuth).thekelleys · dnsmasq · CWE-787 | Критическая9,8 | — | 2,7 % | 31 дек. 2021 г. |
40В плане | CVE-2021-45951Эксплойта нет | Dnsmasq 2.86 has a heap-based buffer overflow in check_bad_address (called from check_for_bogus_wildcard and FuzzCheckForBogusWildcard).thekelleys · dnsmasq · CWE-787 | Критическая9,8 | — | 2,7 % | 31 дек. 2021 г. |
40В плане | CVE-2021-45952Эксплойта нет | Dnsmasq 2.86 has a heap-based buffer overflow in dhcp_reply (called from dhcp_packet and FuzzDhcp).thekelleys · dnsmasq · CWE-787 | Критическая9,8 | — | 2,7 % | 31 дек. 2021 г. |
40В плане | CVE-2021-45955Эксплойта нет | Dnsmasq 2.86 has a heap-based buffer overflow in resize_packet (called from FuzzResizePacket and fuzz_rfc1035.c) because of the lack of a prthekelleys · dnsmasq · CWE-787 | Критическая9,8 | — | 2,6 % | 31 дек. 2021 г. |
40В плане | CVE-2021-45957Эксплойта нет | Dnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest and fuzz_rfc1035.c).thekelleys · dnsmasq · CWE-787 | Критическая9,8 | — | 2,5 % | 31 дек. 2021 г. |
32Наблюдать | CVE-2009-2957Proof of concept | Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote attthekelleys · dnsmasq · CWE-119 | Средняя6,8 | — | 15,7 % | 2 сент. 2009 г. |
32Наблюдать | CVE-2008-3214Эксплойта нет | dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPREthekelleys · dnsmasq · CWE-20 | Высокая7,8 | — | 2,5 % | 18 июл. 2008 г. |
31Наблюдать | CVE-2017-15107Эксплойта нет | A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78.thekelleys · dnsmasq · CWE-358 | Высокая7,5 | — | 2,6 % | 23 янв. 2018 г. |
31Наблюдать | CVE-2022-0934Эксплойта нет | A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq.thekelleys · dnsmasq · CWE-416 | Высокая7,5 | — | 2,6 % | 29 авг. 2022 г. |
31Наблюдать | CVE-2015-8899Эксплойта нет | Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2canonical · ubuntu linux · CWE-20 | Высокая7,5 | — | 2,5 % | 30 июн. 2016 г. |
31Наблюдать | CVE-2005-0877Эксплойта нет | Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq.thekelleys · dnsmasq · CWE-346 | Высокая7,5 | — | 1,9 % | 2 мая 2005 г. |
- CVE-2017-1449267На этой неделе
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via
КритическаяCVSS 9,8Proof of conceptEPSS 94 %canonical · ubuntu linux2 окт. 2017 г.
- CVE-2017-1449165На этой неделе
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via
КритическаяCVSS 9,8Proof of conceptEPSS 86 %thekelleys · dnsmasq3 окт. 2017 г.
- CVE-2017-1449365На этой неделе
Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code vi
КритическаяCVSS 9,8Proof of conceptEPSS 85 %canonical · ubuntu linux2 окт. 2017 г.
- CVE-2023-5038760На этой неделе
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of ser
ВысокаяCVSS 7,5Proof of conceptEPSS 99 %redhat · enterprise linux14 февр. 2024 г.
- CVE-2020-2568157В плане
A flaw was found in dnsmasq before version 2.83.
ВысокаяCVSS 8,1Эксплойта нетEPSS 84 %thekelleys · dnsmasq20 янв. 2021 г.
- CVE-2017-1449556В плане
Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a
ВысокаяCVSS 7,5Proof of conceptEPSS 85 %canonical · ubuntu linux2 окт. 2017 г.
- CVE-2020-2568255В плане
A flaw was found in dnsmasq before 2.83.
ВысокаяCVSS 8,1Эксплойта нетEPSS 75 %thekelleys · dnsmasq20 янв. 2021 г.
- CVE-2017-1449651В плане
Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is speci
ВысокаяCVSS 7,5Proof of conceptEPSS 68 %canonical · ubuntu linux2 окт. 2017 г.
- CVE-2020-2568750В плане
A flaw was found in dnsmasq before version 2.83.
СредняяCVSS 5,9Эксплойта нетEPSS 89 %thekelleys · dnsmasq20 янв. 2021 г.
- CVE-2020-2568350В плане
A flaw was found in dnsmasq before version 2.83.
СредняяCVSS 5,9Эксплойта нетEPSS 88 %thekelleys · dnsmasq20 янв. 2021 г.
- CVE-2017-1370450В плане
In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value.
ВысокаяCVSS 7,5Эксплойта нетEPSS 65 %canonical · ubuntu linux2 окт. 2017 г.
- CVE-2017-1449444В плане
dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handli
СредняяCVSS 5,9Proof of conceptEPSS 70 %canonical · ubuntu linux2 окт. 2017 г.
- CVE-2021-4595340В плане
Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from hash_questions and fuzz_util.c).
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %thekelleys · dnsmasq31 дек. 2021 г.
- CVE-2021-4595640В плане
Dnsmasq 2.86 has a heap-based buffer overflow in print_mac (called from log_packet and dhcp_reply).
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %thekelleys · dnsmasq31 дек. 2021 г.
- CVE-2021-4595440В плане
Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from answer_auth and FuzzAuth).
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %thekelleys · dnsmasq31 дек. 2021 г.
- CVE-2021-4595140В плане
Dnsmasq 2.86 has a heap-based buffer overflow in check_bad_address (called from check_for_bogus_wildcard and FuzzCheckForBogusWildcard).
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %thekelleys · dnsmasq31 дек. 2021 г.
- CVE-2021-4595240В плане
Dnsmasq 2.86 has a heap-based buffer overflow in dhcp_reply (called from dhcp_packet and FuzzDhcp).
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %thekelleys · dnsmasq31 дек. 2021 г.
- CVE-2021-4595540В плане
Dnsmasq 2.86 has a heap-based buffer overflow in resize_packet (called from FuzzResizePacket and fuzz_rfc1035.c) because of the lack of a pr
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %thekelleys · dnsmasq31 дек. 2021 г.
- CVE-2021-4595740В плане
Dnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest and fuzz_rfc1035.c).
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %thekelleys · dnsmasq31 дек. 2021 г.
- CVE-2009-295732Наблюдать
Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote att
СредняяCVSS 6,8Proof of conceptEPSS 15 %thekelleys · dnsmasq2 сент. 2009 г.
- CVE-2008-321432Наблюдать
dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or (2) sending a DHCPRE
ВысокаяCVSS 7,8Эксплойта нетEPSS 2 %thekelleys · dnsmasq18 июл. 2008 г.
- CVE-2017-1510731Наблюдать
A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78.
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %thekelleys · dnsmasq23 янв. 2018 г.
- CVE-2022-093431Наблюдать
A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq.
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %thekelleys · dnsmasq29 авг. 2022 г.
- CVE-2015-889931Наблюдать
Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %canonical · ubuntu linux30 июн. 2016 г.
- CVE-2005-087731Наблюдать
Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq.
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %thekelleys · dnsmasq2 мая 2005 г.