-Infinity
0

ISC BIND 9Description: Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by fl…

First published (updated )

ISC has disclosed two vulnerabilities in BIND 9 (CVE-2024-11187, CVE-2024-12705)

First published (updated )

Fwd: Operational Notification: BIND 9.20 defect in QPzone implementation

ISC has disclosed four vulnerabilities in BIND 9 (CVE-2024-0760, CVE-2024-1737, CVE-2024-1975, CVE-2024-4076)

Ubuntu Bind9-libsClient queries that trigger serving stale data and that also require lookups in local authoritative …

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

ISC BIND 9Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same h…

First published (updated )

Isc StorkIncorrect TLS certificate validation can lead to escalated privileges

8.9
First published (updated )

The RegisterDouble trouble for DNSSEC though the devil is in the details

First published (updated )

ISC BIND 9Cleaning an ECS-enabled cache may cause excessive CPU load

First published (updated )

Microsoft Windows ServerUnbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

ISC BIND 9Specific recursive query patterns may lead to an out-of-memory condition

7.5
First published (updated )

ISC BIND 9Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution

7.5
First published (updated )

ISC BIND 9Querying RFC 1918 reverse zones may cause an assertion failure when "nxdomain-redirect" is enabled

7.5
First published (updated )

ISC BIND 9Parsing large DNS messages may cause excessive CPU load

7.5
First published (updated )

ISC has disclosed two vulnerabilities in BIND 9 (CVE-2023-3341, CVE-2023-4236)

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

ubuntu/bind9named may terminate unexpectedly under high DNS-over-TLS query load

7.5
First published (updated )

ISC BIND 9A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly

7.5
First published (updated )

ISC BIND 9Malformed NSEC records can cause named to terminate unexpectedly when synth-from-dnssec is enabled

7.5
First published (updated )

ubuntu/bind9Exceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0

7.5
First published (updated )

ubuntu/bind9named's configured cache size limit can be significantly exceeded

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

ISC BIND 9named may terminate unexpectedly when processing ECS options in repeated responses to iterative queries

7.5
First published (updated )

ISC BIND 9named configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quota

7.5
First published (updated )

ISC BIND 9named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries

7.5
First published (updated )

ISC BIND 9An UPDATE message flood may cause named to exhaust all available memory

7.5
First published (updated )

ISC DHCPDHCP memory leak

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

ISC DHCPAn option refcount overflow exists in dhcpd

First published (updated )

ISC BIND 9Memory leaks in code handling Diffie-Hellman key exchange via TKEY RRs (OpenSSL 3.0.0+ only)

7.5
First published (updated )

ISC BIND 9Buffer overread in statistics channel code

8.2
First published (updated )

ISC BIND 9BIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedly

7.5
First published (updated )

ISC BIND 9Memory leaks in EdDSA DNSSEC verification code

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203