853 matches found
bind: bind: Denial of Service via long query names in RPZ processing
A flaw was found in BIND. A remote attacker can send specially crafted, excessively long query names to a resolver configured with Response Policy Zones RPZ and wildcard policies. Improper handling of the resulting error condition can cause the service to terminate unexpectedly, leading to a Deni...
bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field
The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone...
ANT-2026-S6CB3P3P · bind9 · Stack Buffer Overflow
stack-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-S6CB3P3P: 03-bind9-matchnsec3-stack-bof In BIND's...
ROOT-OS-DEBIAN-11-CVE-2026-5946 CVE-2026-5946 in rootio-bind9 - Patched by Root
Root has patched CVE-2026-5946 in the rootio-bind9 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-3039 CVE-2026-3039 in rootio-bind9 - Patched by Root
Root has patched CVE-2026-3039 in the rootio-bind9 package for Root:Debian:11. Multiple fixed versions available...
Linux Distros Unpatched Vulnerability : CVE-2026-3592
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolv...
Linux Distros Unpatched Vulnerability : CVE-2026-5946
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet IN for example, CHAOS or HESIOD, or DNS message...
Linux Distros Unpatched Vulnerability : CVE-2026-3593
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9.21.0 through 9.21.2...
Linux Distros Unpatched Vulnerability : CVE-2026-3039
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processin...
Debian dla-4529 : bind9 - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4529 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4529-1 [email protected] https://www.debian.org/lts/security/...
MiracleLinux 8 : bind9.16-9.16.23-0.22.el8_10.5 (AXSA:2026-453:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-453:01 advisory. bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone CVE-2026-1519 Tenable has extracted the preceding description block directly from...
Debian: Security Advisory (DLA-4529-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 42 Update: bind9-next-9.21.20-1.fc42
BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...
Fedora: Security Advisory (FEDORA-2026-d8979b7a9c)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MiracleLinux 8 : bind9.16-9.16.23-0.22.el8_10 (AXSA:2024-8665:02)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8665:02 advisory. bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam CVE-2024-1737 bind9: bind: SIG0 can be used to exhaust...
MiracleLinux 8 : bind9.16-9.16.23-0.14.el8.1 (AXSA:2023-6229:02)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6229:02 advisory. bind: named's configured cache size limit can be significantly exceeded CVE-2023-2828 Tenable has extracted the preceding description block directly from the...
BIND9: undisclosed vulnerability (ZAI-2026-S4CD01)
Not disclosed. Details are not yet publicly disclosed...
BIND9: undisclosed vulnerability (ZAI-2026-P65Z0I)
Not disclosed. Details are not yet publicly disclosed...