tkeypoc

PoC for CVE-2015-5477 BIND9 TKEY DoS This code sends UDP packet that crashes vulnerable BIND9 DNS servers. elceef@osiris:/tkeypoc$ ./tkeypoc.py localhost CVE-2015-5477 BIND9 TKEY PoC Sending packet to localhost ... Done...

cve-2015-5477

cve-2015-5477 PoC for BIND9 TKEY assert DoS CVE-2015-5477 $ ps awux | grep -v grep | grep bind bind 2373 0.0 2.2 141164 13424 ? Ssl 14:58 0:00 /var/named/chroot/sbin/named -u bind -t /var/named/chroot -c /etc/named.conf $ python tkill.py 127.0.0.1 Begin emission: ..Finished to send 1 packets...

vaas-cve-2015-5477

Vulnerability as a Service - CVE 2015-5477 A Debian Wheezy Linux system with a vulnerable version of bind9 to showcase CVS-2015-5477. Overview This docker container is based on Debian Wheezy and has been modified to use a vulernable version of bind9 and the matching additional dependencies. Usage...

[SECURITY] Fedora 45 Update: bind9-next-9.21.22-5.fc45

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Rocky Linux 10.2 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2026_55437)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202655437 advisory. bind9: bind: Potential wildcard CNAME RPZ policy bypass CVE-2026-11331 bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field...

Rocky Linux 9 [CIQ] Security Update: bind9.18 / bind9.18-chroot / bind9.18-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_1670)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20251670 advisory. bind: bind9: Many records in the additional section cause CPU exhaustion CVE-2024-11187 bind: bind9: DNS-over-HTTPS implementation suffers from multiple...

Rocky Linux 9 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2024_5231)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20245231 advisory. bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam CVE-2024-1737 bind9: bind: SIG0 can be used to exhaust CPU...

Rocky Linux 9 [CIQ] Security Update: bind9.18 / bind9.18-chroot / bind9.18-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_55442)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202655442 advisory. bind9: bind: Potential wildcard CNAME RPZ policy bypass CVE-2026-11331 bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field CVE-2026-1332...

Rocky Linux 8 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2026_54654)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202654654 advisory. bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field CVE-2026-13321 bind: bind9: Potential memory usage beyond configured limits...

Rocky Linux 8 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2024_5524)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20245524 advisory. bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam CVE-2024-1737 bind9: bind: SIG0 can be used to exhaust CPU...

Rocky Linux 8 [CIQ] Security Update: bind9.16 / bind9.16-chroot / bind9.16-debuginfo / etc (crlsa-2025_1676)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20251676 advisory. bind: bind9: Many records in the additional section cause CPU exhaustion CVE-2024-11187 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2024_3271)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243271 advisory. bind9: Parsing large DNS messages may cause excessive CPU load CVE-2023-4408 bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387...

Rocky Linux 8 [CIQ] Security Update: bind9.16 / bind9.16-chroot / bind9.16-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_54509)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202654509 advisory. bind9: bind: Potential wildcard CNAME RPZ policy bypass CVE-2026-11331 bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field CVE-2026-1332...

Rocky Linux 9 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2026_54510)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202654510 advisory. bind9: bind: Potential wildcard CNAME RPZ policy bypass CVE-2026-11331 bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field CVE-2026-1332...

cve-2015-5477

PoC for BOND9 TKEY assert DoS CVE-2015-5477 This exploit tests to see if a BIND9 server is vulnerable by sending the exploit in order to see if it crashes. It's C code that you compile the normal way on Unix/Window, such as: gcc tkill.c -o tkill It'll run over both IPv4 and IPv6. This is what it...

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0 by vulnerabilities in aircompressor, libarchive, gstreamer1, LIBPNG, bind9, giflib, react-router, dompurify

Summary IBM Optim version 1.0.0, 1.1.0 and 1.2.0 depends on open-source packages aircompressor, libarchive, gstreamer1, LIBPNG, bind9, giflib, react-router, dompurify which are affected by medium, high and critical severity vulnerabilities. IBM Optim 2.0.0 resolves these vulnerabilities by...

[SECURITY] [DSA 6505-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6505-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 17, 2026 https://www.debian.org/security/faq -...

Debian dsa-6505 : bind9 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6505 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6505-1 [email protected] https://www.debian.org/securit...

CVE-2026-19667

A flaw was found in bind9's named component. A remote attacker, by sending a specially crafted DNS negative answer of exactly 65536 bytes from an authoritative server, can cause a 16-bit length truncation. This results in a zero-byte negative cache entry. When named attempts to read this invalid...

MiracleLinux 9 : bind9.18-9.18.29-14.el9_8.8 (AXSA:2026-1671:05)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1671:05 advisory. bind9: bind: Potential wildcard CNAME RPZ policy bypass CVE-2026-11331 bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field...