UBUNTU-CVE-2024-27304

pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control. T...

BIT-GRAFANA-2020-12459

In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml which contain a secretkey and a bindpassword are world readable...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: runc, aws-load-balancer-controller, flux, helm-push, kor, dynamic-localpv-provisioner, up, sigstore-scaffolding, rook, prometheus-pushgateway, aws-efs-csi-driver, gitness, nodetaint, apisix-ingress-controller, buf, crossplane-provider-aws-iam, kube-logging-operator,...

PT-2024-3471

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the sr9800 bind function in the Linux kernel, which lacks a check for the return code of the usbnet get endpoints function. This can lead to a denial of service...

CVE-2023-50387 affecting package bind for versions less than 9.16.48-1

CVE-2023-50387 affecting package bind for versions less than 9.16.48-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-5679 affecting package bind for versions less than 9.16.48-1

CVE-2023-5679 affecting package bind for versions less than 9.16.48-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-4408 affecting package bind for versions less than 9.16.48-1

CVE-2023-4408 affecting package bind for versions less than 9.16.48-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-6516 affecting package bind for versions less than 9.16.48-1

CVE-2023-6516 affecting package bind for versions less than 9.16.48-1. A patched version of the package is available...

Important: bind

Issue Overview: The DNS message parsing code in named includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected named instance by exploiting this flaw. This...

CentOS: Security Advisory for bind (CESA-2023:5691)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CLSA-2024-1709547568 bind: Fix of 2 CVEs

CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3...

[SECURITY] Fedora 38 Update: bind-dyndb-ldap-11.10-23.fc38

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

[SECURITY] Fedora 38 Update: bind-9.18.24-1.fc38

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Fedora 38 : bind / bind-dyndb-ldap (2024-fae88b73eb)

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-fae88b73eb advisory. Security Fixes - Validating DNS messages containing a lot of DNSSEC signatures could cause excessive CPU load, leading to a denial-of-service...

Fedora: Security Advisory for bind (FEDORA-2024-fae88b73eb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for bind (SUSE-SU-2023:0341-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:0574-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for bind (SUSE-SU-2023:3821-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for bind-dyndb-ldap (FEDORA-2024-fae88b73eb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for ldb, samba (SUSE-SU-2022:2586-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...