Lucene search
+L

13202 matches found

RedHat Linux
RedHat Linux
•added 2026/09/16 3:32 p.m.•5 views

bind: BIND: Denial of Service via malformed DNS64 responses

A flaw was found in BIND. When a resolver is configured to use DNS64, a specially crafted, malformed answer from an authoritative server can cause the named process to exit unexpectedly. This can lead to a Denial of Service DoS for clients relying on the affected resolver...

7.5CVSS6AI score0.00569EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/09/16 3:32 p.m.•6 views

bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses

A flaw was found in BIND 9. A remote attacker can cause a named resolver to stop functioning Denial of Service by inducing the victim resolver to send multiple queries for a DNSSEC-signed zone. If the attacker's authoritative server responds with a specific sequence of crafted answers that arrive...

5.9CVSS6.3AI score0.00452EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/09/16 3:32 p.m.•6 views

bind: BIND: Remote Denial of Service via crafted DNS-over-HTTPS request

A flaw was found in BIND, a widely used Domain Name System DNS software. A remote attacker can exploit this vulnerability by sending a specially crafted DNS-over-HTTPS DoH request containing an invalid SIG0 record. This action, combined with prematurely closing the connection, can cause the named...

7.5CVSS6AI score0.00672EPSS
SaveExploits0References7
NVD
NVD
•added 2026/09/16 3:17 p.m.•13 views

CVE-2026-80274

If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit. This issue affects BIND 9 versions...

7.5CVSS0.00672EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/16 3:17 p.m.•7 views

AZL-103335 CVE-2026-80274 affecting package bind 9.20.26-1

If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit. This issue affects BIND 9 versions...

7.5CVSS6AI score0.00672EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/16 3:17 p.m.•10 views

DEBIAN-CVE-2026-80274

If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit. This issue affects BIND 9 versions...

7.5CVSS6AI score0.00672EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/16 3:17 p.m.•12 views

DEBIAN-CVE-2026-77119

A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity proof, downgrading a secure delegation and letting a forged unsigned answer through. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through...

5.9CVSS5.7AI score0.00231EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/16 3:17 p.m.•5 views

AZL-103341 CVE-2026-77119 affecting package bind 9.20.26-1

A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity proof, downgrading a secure delegation and letting a forged unsigned answer through. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through...

5.9CVSS5.7AI score0.00231EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 3:17 p.m.•17 views

CVE-2026-77119

A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity proof, downgrading a secure delegation and letting a forged unsigned answer through. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through...

5.9CVSS0.00231EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/16 3:17 p.m.•5 views

ALPINE-CVE-2026-76163

If BIND is loaded with a "named.conf" file that contains no global "options" block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure and subsequent unexpected program exit. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and...

7.5CVSS6AI score0.00672EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/16 3:17 p.m.•5 views

AZL-103350 CVE-2026-76163 affecting package bind 9.20.26-1

If BIND is loaded with a "named.conf" file that contains no global "options" block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure and subsequent unexpected program exit. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and...

7.5CVSS6AI score0.00672EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 3:17 p.m.•12 views

CVE-2026-75029

In a query response, an attacker may send named multiple copies of a record that should only exist once such as an SOA record. If the RDATA is the same on all the copies, the record is appended to the in-memory RDATA set, which can cause increased memory usage of the negative cache and possibly...

5.3CVSS0.00714EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/16 3:17 p.m.•10 views

DEBIAN-CVE-2026-75029

In a query response, an attacker may send named multiple copies of a record that should only exist once such as an SOA record. If the RDATA is the same on all the copies, the record is appended to the in-memory RDATA set, which can cause increased memory usage of the negative cache and possibly...

5.3CVSS5.8AI score0.00714EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/16 3:17 p.m.•12 views

DEBIAN-CVE-2026-76163

If BIND is loaded with a "named.conf" file that contains no global "options" block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure and subsequent unexpected program exit. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and...

7.5CVSS6AI score0.00672EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 3:17 p.m.•13 views

CVE-2026-76163

If BIND is loaded with a "named.conf" file that contains no global "options" block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure and subsequent unexpected program exit. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and...

7.5CVSS0.00672EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/16 3:17 p.m.•4 views

AZL-103353 CVE-2026-75029 affecting package bind 9.20.26-1

In a query response, an attacker may send named multiple copies of a record that should only exist once such as an SOA record. If the RDATA is the same on all the copies, the record is appended to the in-memory RDATA set, which can cause increased memory usage of the negative cache and possibly...

5.3CVSS5.8AI score0.00714EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 3:17 p.m.•13 views

CVE-2026-19033

For a secondary zone with transfers restricted by TSIG, named may start to serve the data provided in a zone transfer before the final message with the TSIG signature arrives. This could allow an attacker that does not actually possess a valid TSIG signature to send unauthorized zone contents to ...

6.5CVSS0.0024EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/16 3:17 p.m.•13 views

DEBIAN-CVE-2026-19033

For a secondary zone with transfers restricted by TSIG, named may start to serve the data provided in a zone transfer before the final message with the TSIG signature arrives. This could allow an attacker that does not actually possess a valid TSIG signature to send unauthorized zone contents to ...

6.5CVSS6AI score0.0024EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/16 3:17 p.m.•4 views

AZL-103365 CVE-2026-19666 affecting package bind 9.20.26-1

On a resolver configured to use dns64, if an applicable answer from the authoritative server is malformed in a specific way, the resolver named process will exit unexpectedly. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1...

7.5CVSS6AI score0.00569EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/16 3:17 p.m.•13 views

DEBIAN-CVE-2026-19666

On a resolver configured to use dns64, if an applicable answer from the authoritative server is malformed in a specific way, the resolver named process will exit unexpectedly. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1...

7.5CVSS6AI score0.00569EPSS
SaveExploits0References1
Rows per page
Query Builder