5.45.205.243

Regular View Raw Data
Last Seen: 2024-04-15
Tags:
eol-product

GeneralInformation

Hostnames cdn.yandex.net
download.cdn.yandex.net
internetometr.download.cdn.yandex.net
kp.cdn.yandex.net
sba.cdn.yandex.net
crls.yandex.net
downloader.yandex.net
crls.yandex.ru
download.yandex.ru
Domains yandex.net yandex.ru 
Country Russian Federation
City Moscow
Organization Yandex enterprise network
ISP YANDEX LLC
ASN AS13238

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618 5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017 6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

-1928633604 | 2024-04-04T15:29:35.683219
  
80 / tcp
1335181569 | 2024-04-15T17:09:24.963567
  
443 / tcp



Contact Us

Shodan ® - All rights reserved