libuv vulnerabilities (openSUSE)
14 vulnerabilities.
-
libuvopenSUSE Improper Domain Lookup that potentially leads to SSRF attacks in libuv 7.3 High -
libuvopenSUSE Out-of-Bounds Read in Node.js 5.3 Medium -
libuvopenSUSE update-policy rules of type "subdomain" are enforced incorrectly 4.3 Medium -
libuvopenSUSE A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c 7.5 High -
libuvopenSUSE A truncated TSIG response can lead to an assertion failure 6.5 Medium -
libuvopenSUSE Attempting QNAME minimization after forwarding can lead to an assertion failure in resolver.c 7.5 High -
libuvopenSUSE In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with... 7.5 High -
libuvopenSUSE A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer 4.9 Medium -
libuvopenSUSE A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer 4.9 Medium -
libuvopenSUSE A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c 7.5 High -
libuvopenSUSE BIND does not sufficiently limit the number of fetches performed when processing referrals 8.6 High -
libuvopenSUSE TCP-pipelined queries can bypass tcp-clients limit 7.5 High -
libuvopenSUSE Update policies krb5-subdomain and ms-subdomain do not enforce controls promised in their documentation 6.5 Medium -
libuvopenSUSE An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;" 5.9 Medium