DNS Server vulnerabilities

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

An out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. The flaw results from reading data beyond the intended memory boundary.

Improper authorization in DNS Server allows an authorized attacker to perform tampering locally. Exploitation requires local access and privileges.

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.

Race condition in DNS Server allows an unauthorized attacker to execute code over a network.

Relative path traversal vulnerability in DNS Server allows an authorized attacker to execute code over an adjacent network.

Use-After-Free vulnerability in DNS Server allows an authorized attacker to execute code remotely over the network. The issue stems from improper memory management when processing specially crafted DNS queries.

Insufficient validation of names during AXFR (DNS zone transfer) may allow an attacker to inject malicious or malformed data.

A malicious authoritative server can send an RPZ record that triggers a null pointer dereference due to a missing consistency check, resulting in a denial of service.