RLSA-2025:19835 Important: bind security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

PT-2025-29873

Name of the Vulnerable Software and Affected Versions BIND versions 9.20.0 through 9.20.10 BIND versions 9.21.0 through 9.21.9 BIND versions 9.20.9-S1 through 9.20.10-S1 Description If a named caching resolver is configured with serve-stale-enable set to yes, and with stale-answer-client-timeout...

CVE-2025-40775

When an incoming DNS protocol message includes a Transaction Signature TSIG, BIND always checks it. If the TSIG contains an invalid value in the algorithm field, BIND immediately aborts with an assertion failure. This issue affects BIND 9 versions 9.20.0 through 9.20.8 and 9.21.0 through 9.21.7...

Advisory ROSA-SA-2025-2791

Software: bind 9.11.36 OS: ROSA Virtualization 3.0 packageevrstring: bind-9.11.36-16.rv30.4 CVE-ID: CVE-2022-3094 BDU-ID: 2023-00580 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the named component of the DNS BIND server is related to the ability to use memory after it has been freed. Exploitatio...

GHSA-8459-GG55-8QJJ vulnerabilities

Vulnerabilities for packages: bind...

GHSA-GFW8-MH94-9W58 vulnerabilities

Vulnerabilities for packages: bind...

GHSA-V3R3-642V-RQJ8 vulnerabilities

Vulnerabilities for packages: bind...

RHSA-2025:1691 Red Hat Security Advisory: bind security update

Bulletin has no description...

RHSA-2025:1669 Red Hat Security Advisory: bind security update

Bulletin has no description...

SUSE-SU-2025:0427-1 Security update for bind

This update for bind fixes the following issues: - CVE-2024-11187: Fixes CPU exhaustion caused by many records in the additional section bsc1236596...

RHSA-2021:1479 Red Hat Security Advisory: bind security update

Bulletin has no description...

RHSA-2021:0922 Red Hat Security Advisory: bind security update

Bulletin has no description...

RHSA-2020:2383 Red Hat Security Advisory: bind security update

Bulletin has no description...

RHSA-2018:0102 Red Hat Security Advisory: bind security update

Bulletin has no description...

RHSA-2016:2099 Red Hat Security Advisory: bind security update

Bulletin has no description...

RHSA-2015:1706 Red Hat Security Advisory: bind security update

Bulletin has no description...

CVE-2024-4076 vulnerabilities

Vulnerabilities for packages: bind...

AZL-47000 CVE-2024-1975 affecting package bind for versions less than 9.16.50-1

If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by sending a stream of SIG0 signed requests. This issue affects BIND 9 versions 9.0.0 through...

CVE-2024-0760 vulnerabilities

Vulnerabilities for packages: bind...

USN-6909-1 bind9 vulnerabilities

It was discovered that Bind incorrectly handled a flood of DNS messages over TCP. A remote attacker could possibly use this issue to cause Bind to become unstable, resulting in a denial of service. CVE-2024-0760 Toshifumi Sakaguchi discovered that Bind incorrectly handled having a very large numb...