Lucene search
K

11954 matches found

Microsoft CVE
Microsoft CVE
added 2025/11/29 1:1 a.m.9 views

Podman: build context bind mount

...

7.4CVSS7AI score0.00553EPSS
Exploits0
OSV
OSV
added 2025/11/28 9:15 a.m.3 views

CLSA-2025-1764321323 bind: Fix of CVE-2025-40778

CVE-2025-40778: fix issue with BIND being too lenient when accepting records from answers to prevent the injection of forged data into the cache...

8.6CVSS5.8AI score0.00509EPSS
Exploits1References1
OSV
OSV
added 2025/11/27 10:4 a.m.4 views

RHSA-2025:22205 Red Hat Security Advisory: bind security update

Bulletin has no description...

8.6CVSS6.9AI score0.00509EPSS
Exploits1References7
RedHat Linux
RedHat Linux
added 2025/11/26 9:38 p.m.2 views

bind: Cache poisoning attacks with unsolicited RRs

A vulnerability exists in BIND’s DNS resolver logic that makes it overly permissive when accepting resource records RRs in responses. Under certain conditions, this flaw allows attackers to inject unsolicited or forged DNS records into the cache. This can be exploited to poison the resolver cache...

8.6CVSS6AI score0.00509EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2025/11/26 9:38 p.m.5 views

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

8.6CVSS6.7AI score0.00509EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2025/11/26 7:25 a.m.4 views

bind: Cache poisoning due to weak PRNG

A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...

8.6CVSS6.1AI score0.0041EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2025/11/26 7:25 a.m.5 views

bind: Cache poisoning attacks with unsolicited RRs

A vulnerability exists in BIND’s DNS resolver logic that makes it overly permissive when accepting resource records RRs in responses. Under certain conditions, this flaw allows attackers to inject unsolicited or forged DNS records into the cache. This can be exploited to poison the resolver cache...

8.6CVSS6AI score0.00509EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2025/11/26 7:25 a.m.34 views

bind: DNS forwarders - cache poisoning vulnerability

A cache poisoning vulnerability was found in BIND when using forwarders. Bogus NS records supplied by the forwarders may be cached and used by name if it needs to recurse for any reason. This issue causes it to obtain and pass on potentially incorrect answers. This flaw allows a remote high...

6.8CVSS7.3AI score0.0325EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/11/26 7:25 a.m.7 views

Important: Red Hat Security Advisory: bind9.16 security update

An update for bind9.16 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...

8.6CVSS6.9AI score0.0325EPSS
Exploits1References4
SUSE Linux
SUSE Linux
added 2025/11/25 8:54 a.m.3 views

Security update for bind

This update for bind fixes the following issues: CVE-2025-40778: Address various spoofing attacks bsc1252379. CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator bsc1252380. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...

9.2CVSS7AI score0.00509EPSS
Exploits1References8
OSV
OSV
added 2025/11/25 8:53 a.m.3 views

SUSE-SU-2025:4222-1 Security update for bind

This update for bind fixes the following issues: - CVE-2025-40778: Address various spoofing attacks bsc1252379. - CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator bsc1252380...

8.6CVSS6.4AI score0.00509EPSS
Exploits1References5
Oracle linux
Oracle linux
added 2025/11/25 12:0 a.m.7 views

ipa security update

4.12.2-22.0.1.1 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 29516674 - Add bind to ipa-server-common Requires Orabug: 36518596 4.12.2-22.1 - Resolves: RHEL-118449 ipa: Privilege escalation from host to domain admin in FreeIPA 4.12.2-22 - Resolves: RHEL-107483 ipa-ca-install fails on...

9.1CVSS7.1AI score0.00511EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/11/25 12:0 a.m.7 views

AlmaLinux 10 : bind (ALSA-2025:21034)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:21034 advisory. bind: Cache poisoning attacks with unsolicited RRs CVE-2025-40778 bind: Cache poisoning due to weak PRNG CVE-2025-40780 bind: Resource exhaustion via...

8.6CVSS6.7AI score0.1096EPSS
Exploits1References5
Ubuntu
Ubuntu
added 2025/11/24 11:21 a.m.6 views

USN-7851-2: runC regression

USN-7851-1 fixed vulnerabilities in runC. The introduction of a new upstream release has caused regressions in runc-app and runc-stable. This update fixes the problem. Original advisory details: Lei Wang and Li Fubang discovered that runC incorrectly handled masked paths. An attacker could possib...

7.3AI score
Exploits0References1
RedHat Linux
RedHat Linux
added 2025/11/24 10:36 a.m.4 views

bind: Cache poisoning attacks with unsolicited RRs

A vulnerability exists in BIND’s DNS resolver logic that makes it overly permissive when accepting resource records RRs in responses. Under certain conditions, this flaw allows attackers to inject unsolicited or forged DNS records into the cache. This can be exploited to poison the resolver cache...

8.6CVSS6AI score0.00509EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2025/11/24 10:36 a.m.2 views

Important: Red Hat Security Advisory: bind9.16 security update

An update for bind9.16 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

8.6CVSS6.7AI score0.00509EPSS
Exploits1References3
CNVD
CNVD
added 2025/11/24 12:0 a.m.4 views

Tenda AC21 SetIpMacBind File Stack Buffer Overflow Vulnerability

Tenda AC21 is a dual-band Gigabit wireless router launched by Tenda Technology, designed for home high-speed Internet needs, supporting 802.11acwave2 technology, dual-band concurrent rate up to 2033Mbps, of which the 5GHz band rate up to 1733Mbps, to meet the high-bandwidth applications, such as ...

9.8CVSS8.4AI score0.03398EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/11/24 12:0 a.m.3 views

F5 Networks BIG-IP : BIND vulnerability (K000157948)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.1 / 17.5.1.4 / 21.0.0.1. It is, therefore, affected by a vulnerability as referenced in the K000157948 advisory. In specific circumstances, due to a weakness in the Pseudo Random Number Generator PRNG that is used, ...

8.6CVSS6.5AI score0.0041EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/11/24 12:0 a.m.2 views

RHEL 8 : bind9.16 (RHSA-2025:21939)

"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21939 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

8.6CVSS6.6AI score0.00509EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2025/11/24 12:0 a.m.1 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: bind (UTSA-2025-990955)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990955 advisory. Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects...

8.6CVSS6.5AI score0.00509EPSS
Exploits1References4
Rows per page
Query Builder