CVE-2026-5947: Concurrent Execution using Shared Resource with Improper Synchronization

Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signed with SIG0, it begins work to validate that signature. If, during that validation, the "recursive-clients" limit is reached as would occur during a query...

SUSE SLES15 Security Update : bind (SUSE-SU-2024:2863-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2863-1 advisory. Update to 9.16.50: - Bug Fixes: A regression in cache-cleaning code enabled memory use to grow significantly more quickly than...

SUSE-SU-2024:2862-1 Security update for bind

This update for bind fixes the following issues: Update to 9.16.50: - Bug Fixes: A regression in cache-cleaning code enabled memory use to grow significantly more quickly than before, until the configured max-cache-size limit was reached. This has been fixed. Using rndc flush inadvertently caused...

SUSE-SU-2024:1894-1 Security update for bind

This update for bind fixes the following issues: - CVE-2023-50387: Fixed validating DNS messages containing a lot of DNSSEC signatures that could have let to a denial-of-service bsc1219823. - CVE-2023-50868: Fixed NSEC3 closest encloser proof that could have let to a denial-of-service bsc1219826....