150 matches found
CVE-2026-94300
A flaw was found in BIND. This vulnerability may allow a remote attacker to achieve arbitrary code execution on the target server. An attacker who captures a valid User Datagram Protocol UDP message signed with Generic Security Service Transaction Signature GSS-TSIG can replay it while the...
CVE-2026-94300
Replaying GSS-TSIG signed UDP messages can result in memory corruption in "named". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to a zone the attacker controls, the attacker may potentially...
CVE-2026-94300
Replaying GSS-TSIG signed UDP messages can result in memory corruption in "named". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to a zone the attacker controls, the attacker may potentially...
CVE-2026-94300 Concurrent GSS-TSIG messages corrupt memory
Replaying GSS-TSIG signed UDP messages can result in memory corruption in "named". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to a zone the attacker controls, the attacker may potentially...
EUVD-2026-107254
Replaying GSS-TSIG signed UDP messages can result in memory corruption in "named". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to a zone the attacker controls, the attacker may potentially...
CVE-2026-94300
The BIND 9 software (component named ) is vulnerable to memory corruption due to a race condition when processing concurrent GSS-TSIG signed UDP messages. An attacker who captures a previously signed UDP message can replay it while the negotiated TSIG key remains valid. By simultaneously sending ...
PT-2026-120594
Replaying GSS-TSIG signed UDP messages can result in memory corruption in "named". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to a zone the attacker controls, the attacker may potentially...
Astra Linux – Vulnerability in bind9
In BIND 9.5.0 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.11.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of the Supported Preview Edition, as well as release versions 9.17.0 - 9.17.1 of the BIND 9.17 development branch, BIND servers are vulnerable if they are running an affected version and...
SUSE CVE-2026-42002
Concurrency and locking defects in GSS-TSIG...
CVE-2026-42002
Concurrency and locking defects in GSS-TSIG...
CVE-2026-42002 Concurrency and locking defects in GSS-TSIG
Concurrency and locking defects in GSS-TSIG...
CVE-2026-42002
CVE-2026-42002 relates to PowerDNS Authoritative (pdns) and is caused by concurrency and locking defects in GSS-TSIG. The Debian advisory notes these issues could lead to denial of service or information disclosure, and recommends upgrading to pdns 4.9.15-0+deb13u1. Connected sources also referen...
CVE-2026-42002 Concurrency and locking defects in GSS-TSIG
Concurrency and locking defects in GSS-TSIG...
CVE-2026-42002
Concurrency and locking defects in GSS-TSIG...
PowerDNS Authoritative security vulnerability
PowerDNS Authoritative is a DNS server software developed by PowerDNS Corporation. PowerDNS Authoritative has security vulnerabilities, which stem from concurrency and locking flaws in GSS-TSIG...
CVE-2026-42002: Signal Handler Race Condition
Concurrency and locking defects in GSS-TSIG...
PowerDNS -- Multiple vulnerabilities
PowerDNS Team reports: 2025-07: Internal logic flaw in cache management can lead to a denial of service in Recursor When using views, queries sent using TCP Proxy Protocol will select the view according to the address of the proxy, rather than the address of the initial query. This can lead to...
Unity Linux 20.1060e / 20.1070e Security Update: bind (UTSA-2026-017624)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017624 advisory. BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's default setting...