Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Improper handling of DNS over TCP in Simple DNS Plus v9 allows a remote attacker with querying access to the DNS server to cause the server to return request payloads from other clients. This happens when the TCP length prefix is malformed (len differs from actual packet len), and due to a concurrency/buffering issue, even when the lengths match. A length prefix that is smaller than the actual packet size increases information leakage. In summary, this vulnerability allows an attacker to see DNS queries of other clients.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
JH Software Simple DNS Plus 安全漏洞
Vulnerability Description
JH Software Simple DNS Plus是丹麦JH Software公司的一个DNS服务器软件。 JH Software Simple DNS Plus v9版本存在安全漏洞，该漏洞源于DNS over TCP处理不当，可能导致信息泄露，攻击者可查看其他客户端的DNS查询。
CVSS Information
N/A
Vulnerability Type
N/A