CVE-2023-2829

A named instance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validated Cache RFC 8198 option synth-from-dnssec enabled can be remotely terminated using a zone with a malformed NSEC record. This issue affects BIND 9 versions 9.16.8-S1 through...

ROS-20230414-02

DNS server BIND vulnerability is related to reachable assertion in DNS query processing. Exploitation The vulnerability allows an attacker acting remotely to send repeated patterns of specific requests to servers with DNSSEC-Validated Cache synth-from-rom enabled. queries to servers with the...

PT-2022-6541

Name of the Vulnerable Software and Affected Versions BIND version 9.18.0 Description The issue is related to a reachable assertion when handling DNS queries. An attacker can exploit this by sending repeated patterns of specific queries to servers with the DNSSEC-Validated Cache feature enabled,...