Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable ISC BIND denial of service vulnerabilities.

Summary Potential ISC BIND denial of service vulnerabilities CVE-2023-50868, CVE-2023-5517 have been identified that could affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details...

K000140602: BIND vulnerability CVE-2024-4076

Security Advisory Description Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure. This issue affects BIND 9 versions 9.16.13 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.33-S1...

SUSE CVE-1999-0011

Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer...

SUSE CVE-1999-0024

DNS cache poisoning via BIND, by predictable query IDs...

Important: bind

Issue Overview: Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname of any RTYPE can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name. This issue affects BIND 9 versio...

Amazon Linux 2023 : bind, bind-chroot, bind-devel (ALAS2023-2024-680)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-680 advisory. Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname of any RTYPE can suffer from degraded performance as content is being added or update...

Fedora: Security Advisory for bind (FEDORA-2024-8af1780fdf)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: bind-dyndb-ldap-11.10-29.fc40

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

[SECURITY] Fedora 40 Update: bind-9.18.28-2.fc40

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Fedora 40 : bind / bind-dyndb-ldap (2024-8af1780fdf)

The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-8af1780fdf advisory. Update to BIND 9.18.28 Security Fixes - A malicious DNS client that sent many queries over TCP but never read the responses could cause a server to...

CVE-2024-0760 affecting package bind for versions less than 9.20.0-1

CVE-2024-0760 affecting package bind for versions less than 9.20.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-4076 affecting package bind for versions less than 9.20.0-1

CVE-2024-4076 affecting package bind for versions less than 9.20.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-1737 affecting package bind for versions less than 9.20.0-1

CVE-2024-1737 affecting package bind for versions less than 9.20.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-1975 affecting package bind for versions less than 9.20.0-1

CVE-2024-1975 affecting package bind for versions less than 9.20.0-1. An upgraded version of the package is available that resolves this issue...

BIND DNS Unlimited Resource Distribution DoS

The vulnerability of the BIND DNS server is related to the unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor to cause service failures when there are a large number of resource records for the same domain name...

USN-6909-2 bind9 vulnerabilities

USN-6909-1 fixed several vulnerabilities in Bind. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: Toshifumi Sakaguchi discovered that Bind incorrectly handled having a very large number of RRs existing at the same time. A remote attacker could possib...

USN-6909-2: Bind vulnerabilities

USN-6909-1 fixed several vulnerabilities in Bind. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: Toshifumi Sakaguchi discovered that Bind incorrectly handled having a very large number of RRs existing at the same time. A remote attacker could possib...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.5.6.5)

The version of AOS installed on the remote host is prior to 6.5.6.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.5.6.5 advisory. - Certain DNSSEC aspects of the DNS protocol in RFC 4033, 4034, 4035, 6840, and related RFCs allow remote attackers to cause ...

Ubuntu 18.04 LTS : Bind vulnerabilities (USN-6909-2)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6909-2 advisory. USN-6909-1 fixed several vulnerabilities in Bind. This update provides the corresponding update for Ubuntu 18.04 LTS. Tenable has extracted the preceding...

K000140528: BIND vulnerability CVE-2024-0760

Security Advisory Description A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack. This issue affects BIND 9 versions...