Search CVE reports
1 – 10 of 120 results
(If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, ...)
3 affected packages
bind9, isc-dhcp, bind9-libs
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| bind9 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| isc-dhcp | Needs evaluation | Needs evaluation | Not affected | Not affected | Needs evaluation |
| bind9-libs | Not in release | Not in release | Needs evaluation | Needs evaluation | — |
(A BIND resolver encountering an SVCB/HTTPS AliasMode record referencin ...)
3 affected packages
bind9, isc-dhcp, bind9-libs
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| bind9 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| isc-dhcp | Needs evaluation | Needs evaluation | Not affected | Not affected | Needs evaluation |
| bind9-libs | Not in release | Not in release | Needs evaluation | Needs evaluation | — |
(If a BIND resolver sends a query for a DNSSEC-signed authoritative zon ...)
3 affected packages
bind9, isc-dhcp, bind9-libs
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| bind9 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| isc-dhcp | Needs evaluation | Needs evaluation | Not affected | Not affected | Needs evaluation |
| bind9-libs | Not in release | Not in release | Needs evaluation | Needs evaluation | — |
(A malformed zone may contain an NS or DNAME node above its origin, whi ...)
3 affected packages
bind9, isc-dhcp, bind9-libs
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| bind9 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| isc-dhcp | Needs evaluation | Needs evaluation | Not affected | Not affected | Needs evaluation |
| bind9-libs | Not in release | Not in release | Needs evaluation | Needs evaluation | — |
(An attacker can cause `named` to abort by sending a crafted DNS-over-H ...)
3 affected packages
bind9, isc-dhcp, bind9-libs
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| bind9 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| isc-dhcp | Needs evaluation | Needs evaluation | Not affected | Not affected | Needs evaluation |
| bind9-libs | Not in release | Not in release | Needs evaluation | Needs evaluation | — |
(A validly signed NSEC3 from an unrelated sibling zone may be accepted ...)
3 affected packages
bind9, isc-dhcp, bind9-libs
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| bind9 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| isc-dhcp | Needs evaluation | Needs evaluation | Not affected | Not affected | Needs evaluation |
| bind9-libs | Not in release | Not in release | Needs evaluation | Needs evaluation | — |
(If BIND is loaded with a "`named.conf`" file that contains no global " ...)
3 affected packages
bind9, isc-dhcp, bind9-libs
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| bind9 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| isc-dhcp | Needs evaluation | Needs evaluation | Not affected | Not affected | Needs evaluation |
| bind9-libs | Not in release | Not in release | Needs evaluation | Needs evaluation | — |
(In a query response, an attacker may send `named` multiple copies of a ...)
3 affected packages
bind9, isc-dhcp, bind9-libs
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| bind9 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| isc-dhcp | Needs evaluation | Needs evaluation | Not affected | Not affected | Needs evaluation |
| bind9-libs | Not in release | Not in release | Needs evaluation | Needs evaluation | — |
A BIND recursive resolver may experience excessive resource consumption if it encounters large numbers of a particular kind of invalid DNSSEC record. Default limits on "max-records-per-type" and "max-types-per-name" help mitigate...
3 affected packages
bind9, isc-dhcp, bind9-libs
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| bind9 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| isc-dhcp | Needs evaluation | Needs evaluation | Not affected | Not affected | Needs evaluation |
| bind9-libs | Not in release | Not in release | Needs evaluation | Needs evaluation | — |
On a resolver configured to use ``dns64``, if an applicable answer from the authoritative server is malformed in a specific way, the resolver `named` process will exit unexpectedly. This issue affects BIND 9 versions 9.11.0...
3 affected packages
bind9, isc-dhcp, bind9-libs
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| bind9 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| isc-dhcp | Needs evaluation | Needs evaluation | Not affected | Not affected | Needs evaluation |
| bind9-libs | Not in release | Not in release | Needs evaluation | Needs evaluation | — |