827 matches found
cve-2026-5950-bind9-resolver-dos
CVE-2026-5950 - BIND 9 Resolver DoS Research notes and defensive guidance for CVE-2026-5950, an unbounded resend loop vulnerability in the BIND 9 resolver state machine. Overview CVE-2026-5950 affects recursive BIND 9 resolvers. Under specific retry and bad-server handling conditions, a remote...
BIND-9-Cache-Poisoning-PoC---CVE-2025-40778
BIND 9 Cache Poisoning PoC - CVE-2025-40778 Conceptual Overview This vulnerability allows an attacker to corrupt the DNS cache of a BIND Resolver, forcing legitimate users to be redirected to malicious IP addresses without their knowledge. The core logic of the attack: The attack relies on...
bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses
A flaw was found in BIND 9. A remote attacker can cause a named resolver to stop functioning Denial of Service by inducing the victim resolver to send multiple queries for a DNSSEC-signed zone. If the attacker's authoritative server responds with a specific sequence of crafted answers that arrive...
bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses
A flaw was found in BIND 9. A remote attacker can cause a named resolver to stop functioning Denial of Service by inducing the victim resolver to send multiple queries for a DNSSEC-signed zone. If the attacker's authoritative server responds with a specific sequence of crafted answers that arrive...
bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses
A flaw was found in BIND 9. A remote attacker can cause a named resolver to stop functioning Denial of Service by inducing the victim resolver to send multiple queries for a DNSSEC-signed zone. If the attacker's authoritative server responds with a specific sequence of crafted answers that arrive...
bind: Unbounded resend loop in BIND 9 resolver
A flaw was found in BIND 9. A remote, unauthenticated attacker can exploit an unbounded resend loop vulnerability in the resolver state machine during bad-server handling. By sending specially crafted queries that trigger specific retry conditions, the attacker can cause severe resource exhaustio...
bind: Unbounded resend loop in BIND 9 resolver
A flaw was found in BIND 9. A remote, unauthenticated attacker can exploit an unbounded resend loop vulnerability in the resolver state machine during bad-server handling. By sending specially crafted queries that trigger specific retry conditions, the attacker can cause severe resource exhaustio...
bind: Unbounded resend loop in BIND 9 resolver
A flaw was found in BIND 9. A remote, unauthenticated attacker can exploit an unbounded resend loop vulnerability in the resolver state machine during bad-server handling. By sending specially crafted queries that trigger specific retry conditions, the attacker can cause severe resource exhaustio...
Unity Linux 20.1070e Security Update: bind (UTSA-2026-150944)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150944 advisory. An attacker may be able to cause a named resolver to abort. The attack requires inducing the victim resolver to send multiple queries for a DNSSEC-signed zone hosted...
bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records
A flaw was found in BIND 9. A remote attacker can exploit this vulnerability by querying a BIND resolver for the root of a specially crafted, cached tree of SVCB/HTTPS AliasMode records. This action causes the resolver to spend a disproportionate amount of CPU time constructing the response,...
bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records
A flaw was found in BIND 9. A remote attacker can exploit this vulnerability by querying a BIND resolver for the root of a specially crafted, cached tree of SVCB/HTTPS AliasMode records. This action causes the resolver to spend a disproportionate amount of CPU time constructing the response,...
bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses
A flaw was found in BIND 9. A remote attacker can cause a named resolver to stop functioning Denial of Service by inducing the victim resolver to send multiple queries for a DNSSEC-signed zone. If the attacker's authoritative server responds with a specific sequence of crafted answers that arrive...
bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses
A flaw was found in BIND 9. A remote attacker can cause a named resolver to stop functioning Denial of Service by inducing the victim resolver to send multiple queries for a DNSSEC-signed zone. If the attacker's authoritative server responds with a specific sequence of crafted answers that arrive...
Security Bulletin:Vulnerabilities exists in NPS of IBM Netezza Appliance
Summary Vulnerabilities identified in NPS of IBM Netezza Appliance have been addressed in version 11.3.1.3-IF3. Vulnerability Details CVEID:CVE-2026-13204 DESCRIPTION: If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of...
CLEANSTART-2025-XM99097 named in ISC BIND 9
Security vulnerability affects the bind package. named in ISC BIND 9...
CLEANSTART-2025-AB82867 named in ISC BIND 9
Security vulnerability affects the bind package. named in ISC BIND 9...
CLEANSTART-2025-RT76510 named in ISC BIND 9
Security vulnerability affects the bind package. named in ISC BIND 9...
CLEANSTART-2025-NT99935 problem with the implementation of the new serve-stale feature in BIND 9
Security vulnerability affects the bind package. A problem with the implementation of the new serve-stale feature in BIND 9...