79 matches found
Oracle Linux 9 : bind9.18 (ELSA-2025-19950)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19950 advisory. - Fix upstream reported regression in recent CVE fix CVE-2025-8677 - Refuse malformed DNSKEY records CVE-2025-8677 - Address various spoofing attacks...
Fedora: Security Advisory (FEDORA-2025-3e245eae46)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 9 : bind9.18 (RHSA-2025:19950)
"The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:19950 advisory. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which...
F5 Networks BIG-IP : BIND vulnerability (K000157317)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.1 / 17.5.1.4 / 21.0.0.1. It is, therefore, affected by a vulnerability as referenced in the K000157317 advisory. Querying for records within a specially crafted zone containing certain malformed DNSKEY records can...
K000157317: BIND vulnerability CVE-2025-8677
Security Advisory Description Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and...
Oracle Linux 10 : bind (ELSA-2025-19912)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19912 advisory. - Fix upstream reported regression in recent CVE fix CVE-2025-8677 - Refuse malformed DNSKEY records CVE-2025-8677 - Address various spoofing attacks...
Amazon Linux 2 : bind, --advisory ALAS2-2025-3054 (ALAS-2025-3054)
The version of bind installed on the remote host is prior to 9.11.4-26.P2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3054 advisory. Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This...
Important: bind
Issue Overview: Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1...
[SECURITY] [DLA 4364-1] bind9 security update
Debian LTS Advisory DLA-4364-1 [email protected] https://www.debian.org/lts/security/ Andreas Henriksson November 04, 2025 https://wiki.debian.org/LTS Package : bind9 Version : 1:9.16.50-1deb11u4 CVE ID : CVE-2025-8677 CVE-2025-40778 CVE-2025-40780 Debian Bug : Brief introduction...
Debian dla-4364 : bind9 - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4364 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4364-1 [email protected]...
CVE-2025-8677 vulnerabilities
Vulnerabilities for packages: bind...
CVE-2025-8677 vulnerabilities
Vulnerabilities for packages: bind...
bind-9.20.15-1.1 on GA media (moderate)
bind-9.20.15-1.1 on GA media Announcement ID: openSUSE-SU-2025:15659-1 Rating: moderate Cross-References: CVE-2025-40778 CVE-2025-40780 CVE-2025-8677 CVSS scores: CVE-2025-40778 SUSE : 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N CVE-2025-40778 SUSE : 9.2...
Debian dsa-6033 : bind9 - security update
The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6033 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6033-1 [email protected]...
BELL-CVE-2025-8677
Bulletin has no description...
ISC BIND DoS Vulnerability (CVE-2025-8677) - Windows
ISC BIND is prone to a denial of service DoS vulnerability via malformed DNSKEY handling. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2025-8677
A vulnerability was found in BIND 9 resolvers, where processing malformed DNSKEY records from a specially crafted zone can lead to resource exhaustion, primarily causing excessive CPU utilization. This issue enables a remote, unauthenticated attacker to degrade resolver performance and potentiall...
CVE-2025-8677
Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1...
CVE-2025-8677
CVE-2025-8677 affects ISC BIND 9 where querying specially crafted zones with malformed DNSKEY records can exhaust CPU. Affected ranges include 9.18.x (up to 9.18.39, plus S1 builds) and 9.20.x (up to 9.20.13, plus S1 builds), and 9.21.x up to 9.21.12. Connected advisories confirm a fix is availab...