CLSA-2026-1787670751 bind: Fix of CVE-2023-6516

CVE-2023-6516: unbounded growth of the asynchronous RBTDB tree-pruning queue let a recursive resolver exceed the configured max-cache-size; tree pruning now runs on a dedicated task with an unlimited quantum so queued cleanup events cannot accumulate into a backlog...

CLSA-2026-1787401059 Fix CVE(s): CVE-2023-6516

SECURITY UPDATE: named running as a recursive resolver could be driven to exceed the configured max-cache-size, and exhaust available memory, because tree-pruning cleanup events were queued faster than they were processed - debian/patches/CVE-2023-6516.patch: limit isctasksend overhead for tree...

CLSA-2026-1786523775 bind: Fix of 2 CVEs

CVE-2023-6516: bound the memory used to queue RBTDB tree-pruning events, so that recursive query patterns which continuously trigger cache-database maintenance can no longer exceed max-cache-size and exhaust host memory DoS - CVE-2023-6516 follow-up: make the tree-pruning queue per-node-lock...

MiracleLinux 8 : bind-9.11.20-5.el8 (AXSA:2021-1277:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1277:01 advisory. bind: asterisk character in an empty non-terminal can cause an assertion failure in rbtdb.c CVE-2020-8619 bind: truncated TSIG response can lead to ...

CLSA-2024-1717086870 bind: Fix of CVE-2023-4408

CVE-2023-4408: use hashtable when parsing a message - Fix incorrect locking in maybefreerbtdb...

SUSE CVE-2018-5737

A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some cases cause...

ALPINE-CVE-2018-5737

A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some cases cause...