PolarDNS

PolarDNS is a specialized authoritative DNS server written in Python 3.x, originally developed as a tool for security testing of DNS recursive resolvers from the server-side. It allows the operator to produce custom DNS responses, making it suitable for in-depth DNS protocol testing purposes...

nsd

NSD NLnet Labs 네임 서버 데몬NSD은 권위 있는authoritative DNS 네임 서버입니다. 속도, 신뢰성, 안정성 및 보안이 매우 중요한 환경에서의 운영을 위해 개발되었습니다. 피드백이 있으시면 언제든 환영합니다. 주저하지 말고 GitHub에 이슈를 작성하거나 커뮤니티 포럼에 메시지를 남겨 주세요. NSD에 대해 더 자세히 알아보려면 문서를 읽어보세요. 빌드 다음이 설치되어 있는지 확인하세요: C 툴체인 컴파일러, 링커, 어셈블러 등 C를 컴파일하는 데 필요한 도구 모음 OpenSSL 및 해당 include ...

CVE-2025-40778

CVE-2025-40778 개념 증명PoC 추가 레코드Additional Records 주입을 통한 DNS 캐시 포이즈닝 취약점의 교육용 데모입니다. ⚠️ 면책 조항 교육 목적으로만 제공됩니다 이 도구는 교육 및 승인된 보안 테스트 목적으로만 제공됩니다. 귀하가 소유하지 않았거나 명시적 테스트 허가를 받지 않은 시스템에 이 도구를 무단 사용하는 것은 불법이며 비윤리적입니다. 저자는 이 도구로 인한 오용 또는 손해에 대해 어떠한 책임도 지지 않습니다. 📋 설명 이 PoC는 손상된 권한 있는authoritative DNS 서버가...

UBUNTU-CVE-2026-19667

If an attacker-controlled authoritative server can produce a negative...

CVE-2026-19667

If an attacker-controlled authoritative server can produce a negative...

UBUNTU-CVE-2026-80274

If a BIND resolver sends a query for a DNSSEC-signed authoritative zon...

CVE-2026-19667

If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in named results in a negative cache entry of 0 bytes. When this entry is subsequently read, named aborts. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 throug...

CVE-2026-80274

If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit. This issue affects BIND 9 versions...

CVE-2026-19667

If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in named results in a negative cache entry of 0 bytes. When this entry is subsequently read, named aborts. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 throug...

cve-2018-5740

CVE-2018-5740 PoC Named, which is received response from legimate authoritative server, is crashed by CVE-2018-5740. FILES named.conf: BIND configration file for authoritative server. example.com: zone file for authoritative server. named-full-resolver.conf: BIND configration file for victim...

Transformers-Forged-To-Fight-Offline-Version

Transformers: Forged to Fight, offline revival handoff This package contains a working offline boot of Transformers: Forged to Fight, plus every tool, patch, and reverse engineering note used to get there. It is meant to be picked up by someone who has the time and energy to take the next and muc...

[SECURITY] Fedora 44 Update: nsd-4.15.1-1.fc44

NSD is a complete implementation of an authoritative DNS name server. For further information about what NSD is and what NSD is not please consult the REQUIREMENTS document which is a part of this distribution...

[SECURITY] Fedora 43 Update: nsd-4.15.1-1.fc43

NSD is a complete implementation of an authoritative DNS name server. For further information about what NSD is and what NSD is not please consult the REQUIREMENTS document which is a part of this distribution...

Astra Linux – Vulnerability in bind9

Resolver caches and authoritative zone databases that hold a significant number of Resource Records for the same hostname of any RTYPE may experience degraded performance as content is added or updated, as well as when handling client queries for this name. This issue affects BIND 9 versions 9.11...

Astra Linux – Vulnerability in bind9

In BIND 9.3.0 - 9.11.35, 9.12.0 - 9.16.21, and versions 9.9.3-S1 - 9.11.35-S1 and 9.16.8-S1 - 9.16.21-S1 of the BIND Supported Preview Edition, as well as release version 9.17.0 - 9.17.18 of the BIND 9.17 development branch, exploiting broken authoritative servers using a flaw in response...

bind: bind9: Record ordering based unexpected exit with CNAME or DNAME

The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A...

[SECURITY] [DSA 6420-1] pdns security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6420-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 08, 2026 https://www.debian.org/security/faq -...

Linux Distros Unpatched Vulnerability : CVE-2026-52684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If the auth responds very slowly and the records expire in between, the capping of TTLs is not enforced for lack of data. This does not happen on regular resolv...

CVE-2026-52684

If the auth responds very slowly and the records expire in between, the capping of TTLs is not enforced for lack of data. This does not happen on regular resolve as then then the child records are used immediately if not expired and thus valid, or the records are expired, and in that case not use...

EUVD-2026-47932

If the auth responds very slowly and the records expire in between, the capping of TTLs is not enforced for lack of data. This does not happen on regular resolve as then then the child records are used immediately if not expired and thus valid, or the records are expired, and in that case not use...