Vulnerability fixed in BIND 9

ICS has fixed a vulnerability in BIND 9. The vulnerability is located in certain versions of BIND 9, where malformed BRID/HHIT records can lead to the unexpected termination of the named service, which is critical for DNS resolution. This vulnerability allows attackers to crash the service throug...

CVE-2025-13878

Malformed BRID/HHIT records can cause named to terminate unexpectedly. This issue affects BIND 9 versions 9.18.40 through 9.18.43, 9.20.13 through 9.20.17, 9.21.12 through 9.21.16, 9.18.40-S1 through 9.18.43-S1, and 9.20.13-S1 through 9.20.17-S1...

EUVD-2022-40773

Malicious code in bioql PyPI...

SUSE CVE-2022-38177

By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources...

ISC Releases Security Patches for New BIND DNS Software Vulnerabilities

The Internet Systems Consortium ISC has released patches to address multiple security vulnerabilities in the Berkeley Internet Name Domain BIND 9 Domain Name System DNS software suite that could lead to a denial-of-service DoS condition. "A remote attacker could exploit these vulnerabilities to...

ISC BIND 9 'libdns' 远程拒绝服务漏洞(CVE-2013-2266)

Bugtraq ID:58736 CVE ID:CVE-2013-2266 ISC BIND是一款DNS协议的实现 ISC BIND存在一个安全漏洞，允许远程攻击者利用漏洞发送特制的请求，使目标named服务在处理规则表达式时消耗大量内存，造成系统崩溃。 BIND 9.6.x和10.x不受此漏洞影响。此外此漏洞仅影响unix及相关的操作系统，基于windows的版本不受此漏洞影响。 0 ISC BIND 9.7.x, 9.8.0 - 9.8.5b1, 9.9.0 - 9.9.3b1 厂商解决方案 ISC BIND 9.8.4-P2, 9.9.2-P及更改版本已经修复此漏洞，建议用户下载更...