nsd

NSD NLnet Labs 名称服务器守护进程（NSD）是一个权威 DNS 名称服务器。它专为速度、可靠性、稳定性和安全性至关重要的环境而开发。如果您有任何反馈，我们很乐意听取您的意见。请随时在 Github 上创建 issue 或在我们的社区论坛上发布消息。您可以通过阅读我们的文档来了解更多关于 NSD 的信息。 构建 请确保已安装以下内容： C 工具链（用于编译 C 的一组工具，如编译器、链接器和汇编器） OpenSSL 及其头文件（通常包含在库的 "dev" 版本中） libevent 及其头文件（通常包含在库的 "dev" 版本中） flex bison 从 Git 构建时，缺...

PolarDNS

PolarDNS は Python 3.x で書かれた特殊な権威 DNS サーバーで、もともとはサーバー側から DNS 再帰リゾルバーのセキュリティテストを行うためのツールとして開発されました。 これにより、オペレーターはカスタム DNS 応答を生成でき、詳細な DNS プロトコルテストに適しています。 PolarDNS は以下のテストに使用できます： DNS リゾルバー（サーバー側） DNS クライアント DNS ライブラリ DNS パーサーおよびディセクター DNS 情報を扱うあらゆるソフトウェア UDP と TCP の両方のプロトコルをサポートし、オペレーターは DNS...

CVE-2025-40778

CVE-2025-40778 概念验证 通过附加记录注入演示 DNS 缓存投毒漏洞的教育性示例。 ⚠️ 免责声明 仅供教育目的使用 本工具仅用于教育和授权安全测试目的。未经授权将本工具用于您不拥有或未经明确许可测试的系统，属于违法行为且不道德。 作者对本工具被滥用或造成的损害不承担任何责任。 📋 描述 此 PoC 演示了受入侵的权威 DNS 服务器如何将投毒记录注入 DNS 响应，从而可能在用户不知情的情况下将用户重定向到恶意服务器。 攻击向量： 受入侵的权威名称服务器注入附加 DNS 记录 投毒记录被递归解析器缓存 查询合法域名的用户被重定向到攻击者控制的 IP...

cve-2018-5740

CVE-2018-5740 の PoC 正当な権威サーバからの応答を受信した Named が CVE-2018-5740 によりクラッシュします。 ファイル named.conf: 権威サーバ用の BIND 設定ファイル example.com: 権威サーバ用のゾーンファイル named-full-resolver.conf: 被害フルリゾルバサーバ用の BIND 設定ファイル 再現手順 CentOS 7.5 をインストールします。 bind および bind-utils パッケージをインストールします。 yum install bind-9.9.4-61.el7.x8664...

AlmaLinux 9.2 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-dnssec-doc / etc (ALMALINUX9.2:CLSA-2024:1726683307)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1726683307 advisory. - Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname of any RTYPE can suffer from...

CentOS Linux 7 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-export-devel / etc (CENTOS7:CLSA-2024:1720777628)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1720777628 advisory. - The DNS message parsing code in named includes a section whose computational complexity is overly high. It does not cause problems for typical...

Transformers-Forged-To-Fight-Offline-Version

Transformers: Forged to Fight — オフライン復活ハンドオフ このパッケージには、Transformers: Forged to Fight の動作するオフラインブートと、そこに至るまでに使用したすべてのツール、パッチ、リバースエンジニアリングノートが含まれています。これは、次の、はるかに大きなステップ（つまり、ゲームのサーバー側コンテンツをゼロから再構築すること）に取り組む時間とエネルギーがある人に引き継がれることを意図しています。ここにあるものはすべて文書化されているため、私のようにゼロから始める必要はありません。...

UBUNTU-CVE-2026-80274

If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit. This issue affects BIND 9 versions...

AZL-103332 CVE-2026-78301 affecting package bind 9.20.26-1

A malformed zone may contain an NS or DNAME node above its origin, which named treats as a zone cut. If an attacker inserts a malformed zone into a BIND authoritative server e.g., via zone transfer, queries for names inside the configured zone then lose authoritative status and return an...

CVE-2026-19667

If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in named results in a negative cache entry of 0 bytes. When this entry is subsequently read, named aborts. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 throug...

ALPINE-CVE-2026-19667

If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in named results in a negative cache entry of 0 bytes. When this entry is subsequently read, named aborts. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 throug...

UBUNTU-CVE-2026-19667

If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in named results in a negative cache entry of 0 bytes. When this entry is subsequently read, named aborts. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 throug...

CVE-2026-19667

If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in named results in a negative cache entry of 0 bytes. When this entry is subsequently read, named aborts. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 throug...

CVE-2026-80274

If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit. This issue affects BIND 9 versions...

CVE-2026-19667

If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in named results in a negative cache entry of 0 bytes. When this entry is subsequently read, named aborts. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 throug...

Astra Linux – Vulnerability in bind9

In BIND 9.3.0 - 9.11.35, 9.12.0 - 9.16.21, and versions 9.9.3-S1 - 9.11.35-S1 and 9.16.8-S1 - 9.16.21-S1 of the BIND Supported Preview Edition, as well as release version 9.17.0 - 9.17.18 of the BIND 9.17 development branch, exploiting broken authoritative servers using a flaw in response...

[SECURITY] Fedora 44 Update: pdns-recursor-5.4.6-2.fc44

PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...

[SECURITY] Fedora 45 Update: nsd-4.15.1-1.fc45

NSD is a complete implementation of an authoritative DNS name server. For further information about what NSD is and what NSD is not please consult the REQUIREMENTS document which is a part of this distribution...

[SECURITY] Fedora 44 Update: nsd-4.15.1-1.fc44

NSD is a complete implementation of an authoritative DNS name server. For further information about what NSD is and what NSD is not please consult the REQUIREMENTS document which is a part of this distribution...

[SECURITY] Fedora 43 Update: nsd-4.15.1-1.fc43

NSD is a complete implementation of an authoritative DNS name server. For further information about what NSD is and what NSD is not please consult the REQUIREMENTS document which is a part of this distribution...