CVE-2025-40778

CVE-2025-40778 개념 증명PoC 추가 레코드Additional Records 주입을 통한 DNS 캐시 포이즈닝 취약점의 교육용 데모입니다. ⚠️ 면책 조항 교육 목적으로만 제공됩니다 이 도구는 교육 및 승인된 보안 테스트 목적으로만 제공됩니다. 귀하가 소유하지 않았거나 명시적 테스트 허가를 받지 않은 시스템에 이 도구를 무단 사용하는 것은 불법이며 비윤리적입니다. 저자는 이 도구로 인한 오용 또는 손해에 대해 어떠한 책임도 지지 않습니다. 📋 설명 이 PoC는 손상된 권한 있는authoritative DNS 서버가...

UBUNTU-CVE-2026-19667

If an attacker-controlled authoritative server can produce a negative...

CVE-2026-19667

If an attacker-controlled authoritative server can produce a negative...

CVE-2026-19667

If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in named results in a negative cache entry of 0 bytes. When this entry is subsequently read, named aborts. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 throug...

CVE-2026-19667

If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in named results in a negative cache entry of 0 bytes. When this entry is subsequently read, named aborts. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 throug...

cve-2018-5740

CVE-2018-5740 PoC 합법적인 권한 있는 서버로부터 응답을 받은 named가 CVE-2018-5740에 의해 충돌합니다. 파일 named.conf: 권한 있는 서버용 BIND 설정 파일. example.com: 권한 있는 서버용 zone 파일. named-full-resolver.conf: 피해자 풀-리졸버 서버용 BIND 설정 파일. 재현 단계 CentOS 7.5를 설치합니다. bind 및 bind-utils 패키지를 설치합니다. root@kitploit: yum install...

bind: bind9: Record ordering based unexpected exit with CNAME or DNAME

The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A...

[SECURITY] [DSA 6420-1] pdns security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6420-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 08, 2026 https://www.debian.org/security/faq -...

EUVD-2026-47707

The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG records causes the validator to...

SUSE CVE-2026-33612

A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning...

CVE-2026-52690

Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail...

CVE-2026-42387

A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to a crash of the Recursor due to insuffcient input validation...

CVE-2026-42387

A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to a crash of the Recursor due to insuffcient input validation...

CVE-2026-33612

A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning...

CVE-2026-33612

A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning...

CVE-2026-52690 Spoofed answers can mark an authoritative non-EDNS capable

Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail...

CVE-2026-52690

CVE-2026-52690 affects the PowerDNS Recursor. Spoofed replies can cause an authoritative server’s IP to be marked as not supporting EDNS, leading to DNSSEC validation failures for records served by that server. The vulnerability’s impact is documented as enabling validation failures in the presen...

CVE-2026-52690 Spoofed answers can mark an authoritative non-EDNS capable

Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail...

CVE-2026-52690

Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail...

CVE-2026-52690

Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail...