Skip to content
OpenAdvisories

Archive

17 October 2019

Vulnerabilities first published on this day (UTC), newest first.

← September 2019 2019 / October /17 November 2019 →
  1. 147
  2. 275
  3. 353
  4. 432
  5. 58
  6. 615
  7. 756
  8. 878
  9. 9107
  10. 10131
  11. 1151
  12. 129
  13. 136
  14. 1442
  15. 1520
  16. 16243
  17. 17112
  18. 1813
  19. 193
  20. 203
  21. 2136
  22. 2224
  23. 2395
  24. 2439
  25. 2556
  26. 26 
  27. 27 
  28. 2856
  29. 2956
  30. 3034
  31. 3173
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.9
    CVE-2019-6476

    An error in QNAME minimization code can cause BIND to exit with an assertion failure

    A defect in code added to support QNAME minimization can cause named to exit with an assertion failure if a forwarder returns a referral rather than resolving the query. This affects BIND versions 9.14.0 up to 9.14.6, and 9.15.0 up to 9.15.4.

    ISC BIND 9 bind Alpine
  • Medium 5.9
    CVE-2019-6475

    A flaw in mirror zone validity checking can allow zone data to be spoofed

    Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had …

    ISC BIND 9 bind Alpine
  • Medium 6.8
    CVE-2019-11284

    Reactor Netty authentication leak in redirects

    Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones. A remote unauthenticated malicious user may gain access to credentials for a different server than they have access to.

    Pivotal Reactor Netty io.projectreactor.netty:reactor-netty Maven