CVE-2020-25682
- EPSS 34.29%
- Veröffentlicht 20.01.2021 17:15:12
- Zuletzt bearbeitet 04.11.2025 20:15:56
A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract names from DNS packets before validating them with DNSSEC data. An attacker on the network, who can create valid DNS replies, could use...
CVE-2020-25683
- EPSS 31.32%
- Veröffentlicht 20.01.2021 16:15:14
- Zuletzt bearbeitet 04.11.2025 20:15:57
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. A remote attacker, who can create valid DNS replies, could use this flaw ...
CVE-2020-25684
- EPSS 0.27%
- Veröffentlicht 20.01.2021 16:15:14
- Zuletzt bearbeitet 04.11.2025 20:15:57
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:reply_query() if the reply destination address/port is used by the pending forwarded queries. However, it does not use the a...
CVE-2020-25685
- EPSS 0.33%
- Veröffentlicht 20.01.2021 16:15:14
- Zuletzt bearbeitet 04.11.2025 20:15:57
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:reply_query(), which is the forwarded query that matches the reply, by only using a weak hash of the query name. Due to the weak...
CVE-2021-2012
- EPSS 0.34%
- Veröffentlicht 20.01.2021 15:15:46
- Zuletzt bearbeitet 21.11.2024 06:02:10
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via m...
CVE-2021-2016
- EPSS 0.35%
- Veröffentlicht 20.01.2021 15:15:46
- Zuletzt bearbeitet 21.11.2024 06:02:11
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple pro...
- EPSS 0.36%
- Veröffentlicht 20.01.2021 15:15:46
- Zuletzt bearbeitet 21.11.2024 06:02:11
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via m...
CVE-2021-2020
- EPSS 1.77%
- Veröffentlicht 20.01.2021 15:15:46
- Zuletzt bearbeitet 21.11.2024 06:02:11
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple prot...
CVE-2021-2021
- EPSS 51.8%
- Veröffentlicht 20.01.2021 15:15:46
- Zuletzt bearbeitet 21.11.2024 06:02:11
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple pro...
CVE-2021-2022
- EPSS 0.4%
- Veröffentlicht 20.01.2021 15:15:46
- Zuletzt bearbeitet 21.11.2024 06:02:11
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.6.50 and prior, 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with n...