Infoblox Dns One Appliance vulnerabilities

3 vulnerabilities

Known vulnerabilities in Infoblox Dns One Appliance, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2004-0460infobloxdns_one_appliance+5
EPSS score
45.33%
Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, or (5) NAK messages, which can generate a long string when writing to a log file.6.8CVE-2004-0606infobloxdns_one_appliance
EPSS score
2.26%
Cross-site scripting (XSS) vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitrary scripts as other users via the (1) CLIENTID or (2) HOSTNAME option of a DHCP request.10CVE-2004-0461infobloxdns_one_appliance+5
EPSS score
16.77%
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.