Lucene search
K

6 matches found

OSV
OSV
added 2026/04/15 1:36 p.m.2 views

SUSE-SU-2026:1351-1 Security update for bind

This update for bind fixes the following issues: Security issues: - CVE-2026-1519: maliciously crafted DNSSEC-validated zone can lead to denial of service bsc1260805. - CVE-2026-3104: memory leak in code preparing DNSSEC proofs of non-existence allows for DoS bsc1260567. - CVE-2026-3119:...

7.5CVSS5.9AI score0.00061EPSS
Exploits0References10
Tenable Nessus
Tenable Nessus
added 2026/04/05 12:0 a.m.2 views

Fedora 42 : bind9-next (2026-bcc66a29da)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bcc66a29da advisory. Update to 9.21.20 rhbz2440560 Security Fixes: - Fix unbounded NSEC3 iterations when validating referrals to unsigned delegations. CVE-2026-1519 - Fi...

7.5CVSS7.5AI score0.00061EPSS
Exploits0References5
Ubuntu
Ubuntu
added 2026/03/25 4:32 p.m.7 views

USN-8124-1: Bind vulnerabilities

Samy Medjahed discovered that Bind incorrectly handled insecure delegation validation. A remote attacker could possibly use this issue to cause excessive NSEC3 iterations, consuming CPU resources, and leading to a denial of service. CVE-2026-1519 Vitaly Simonovich discovered that Bind incorrectly...

7.5CVSS5.8AI score0.00061EPSS
Exploits0
Cvelist
Cvelist
added 2026/03/25 1:29 p.m.20 views

CVE-2026-3104 Memory leak in code preparing DNSSEC proofs of non-existence

A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain. This issue affects BIND 9 versions 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, and 9.20.9-S1 through 9.20.20-S1. BIND 9 versions 9.18.0 through 9.18.46 and 9.18.11-S1 through...

7.5CVSS0.00052EPSS
Exploits0References3
CVE
CVE
added 2026/03/25 1:29 p.m.14 views

CVE-2026-3104

CVE-2026-3104 describes a memory leak in BIND resolver code during DNSSEC non-existence proof preparation caused by processing a specially crafted domain. Affected: BIND 9.20.0–9.20.20, 9.21.0–9.21.19, and 9.20.9-S1–9.20.20-S1. Not affected: 9.18.x series. Impact: memory growth potentially leadin...

7.5CVSS5.8AI score0.00052EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/25 1:29 p.m.2 views

CVE-2026-3104 Memory leak in code preparing DNSSEC proofs of non-existence

A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain. This issue affects BIND 9 versions 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, and 9.20.9-S1 through 9.20.20-S1. BIND 9 versions 9.18.0 through 9.18.46 and 9.18.11-S1 through...

7.5CVSS5.8AI score0.00052EPSS
Exploits0References3
Rows per page
Query Builder