{"id":"CVE-2025-8677","aliases":["ALPINE-CVE-2025-8677","ALSA-2025:19912","ALSA-2025:19950","ALSA-2025:21034","ALSA-2025:21111","ALSA-2026:18786","AZL-68733","AZL-68742","BELL-CVE-2025-8677","CLSA-2026-1782147734","CLSA-2026-1782473390","CLSA-2026-1787731848","CLSA-2026-1792648513","DEBIAN-CVE-2025-8677","DLA-4364-1","DSA-6033-1","EUVD-2025-35583","GHSA-924g-f9mr-cm6x","MGASA-2025-0254","OESA-2025-2654","OESA-2025-2717","OESA-2025-2718","RHSA-2025:19912","RHSA-2025:19950","RHSA-2025:21034","RHSA-2025:21111","RHSA-2026:18786","RHSA-2026:6935","RLSA-2025:21034","RLSA-2025:21111","RLSA-2026:18786","SUSE-SU-2025:3903-1","SUSE-SU-2025:4110-1","SUSE-SU-2026:20085-1","UBUNTU-CVE-2025-8677","USN-7836-1","USN-7836-2","USN-8929-1","openSUSE-SU-2025:15659-1","openSUSE-SU-2026:20039-1"],"status":"published","title":"Resource exhaustion via malformed DNSKEY handling","description":"Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.10737,"percentile":0.95857,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-405"],"published":"2025-10-22T00:00:00Z","modified":"2026-10-29T11:58:16Z","fixes":[{"ecosystem":"Alpine:v3.19","package":"bind","fixed_in":["9.18.41-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"bind","fixed_in":["9.18.41-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"bind","fixed_in":["9.18.41-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"bind","fixed_in":["9.20.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"bind","fixed_in":["9.20.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"bind","fixed_in":["9.20.15-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"bind","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"bind-chroot","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"bind-devel","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"bind-dnssec-doc","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"bind-dnssec-utils","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"bind-doc","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"bind-libs","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"bind-license","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"bind-utils","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"python3-bind","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"bind","fixed_in":["9.16.50-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"bind","fixed_in":["9.20.15-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"bind","fixed_in":["9.18.41-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"bind","fixed_in":["9.20.15-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"bind","fixed_in":["9.20.15-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind","fixed_in":["32:9.16.23-11.el9_2.2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-chroot","fixed_in":["32:9.16.23-11.el9_2.2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-devel","fixed_in":["32:9.16.23-11.el9_2.2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-dnssec-doc","fixed_in":["32:9.16.23-11.el9_2.2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-dnssec-utils","fixed_in":["32:9.16.23-11.el9_2.2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-doc","fixed_in":["32:9.16.23-11.el9_2.2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-libs","fixed_in":["32:9.16.23-11.el9_2.2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-license","fixed_in":["32:9.16.23-11.el9_2.2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-utils","fixed_in":["32:9.16.23-11.el9_2.2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-bind","fixed_in":["32:9.16.23-11.el9_2.2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind","fixed_in":["32:9.16.23-31.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-chroot","fixed_in":["32:9.16.23-31.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-devel","fixed_in":["32:9.16.23-31.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-dnssec-doc","fixed_in":["32:9.16.23-31.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-dnssec-utils","fixed_in":["32:9.16.23-31.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-doc","fixed_in":["32:9.16.23-31.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-libs","fixed_in":["32:9.16.23-31.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-license","fixed_in":["32:9.16.23-31.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-utils","fixed_in":["32:9.16.23-31.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-bind","fixed_in":["32:9.16.23-31.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"bind9","fixed_in":["1:9.18.41-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bind9","fixed_in":["1:9.20.15-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bind9","fixed_in":["1:9.20.15-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-chroot","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-debuginfo","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-debugsource","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-doc","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-utils","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-utils-debuginfo","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-libs","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-libs-debuginfo","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-license","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-utils","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-utils-debuginfo","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-bind","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-debuginfo","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-debugsource","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-devel","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-dnssec-utils-debuginfo","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-doc","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-libs","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-libs-debuginfo","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-utils-debuginfo","fixed_in":["32:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"bind","fixed_in":["2:9.16.23-40.el9_8.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"bind9","fixed_in":["1:9.9.5.dfsg-3ubuntu0.19+esm15"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"bind9","fixed_in":["1:9.10.3.dfsg.P4-8ubuntu1.19+esm11"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"bind9","fixed_in":["1:9.11.3+dfsg-1ubuntu1.19+esm6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"bind9","fixed_in":["1:9.18.30-0ubuntu0.20.04.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"bind9","fixed_in":["1:9.18.39-0ubuntu0.22.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"bind9","fixed_in":["1:9.18.39-0ubuntu0.24.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"bind9","fixed_in":["1:9.20.11-1ubuntu2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"bind9","fixed_in":["1:9.20.11-1ubuntu3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.19","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.41-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.41-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.41-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.15-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-4.el10_0.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-4.el10_0.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.50-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.15-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.18.11-r0"},{"fixed":"9.18.41-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.20.9-r0"},{"fixed":"9.20.15-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.18.16-r0"},{"fixed":"9.20.15-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"bind9-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"bind9-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"bind9utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"dnsutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libbind-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libbind-export-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libbind9-160","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libdns-export1100","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libdns1100","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libirs-export160","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libirs160","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libisc-export169","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libisc169","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libisccc-export160","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libisccc160","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libisccfg-export160","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libisccfg160","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"liblwres160","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els9"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"bind9-dnsutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els9"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"bind9-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els9"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"bind9-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els9"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"bind9-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els9"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"bind9-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els9"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"bind9utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els9"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"dnsutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els9"}]}],"bundled":13},{"source":"osv","ecosystem":"Debian:12","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.41-1~deb12u1"}]}],"versions":["1:9.18.12-1","1:9.18.13-1","1:9.18.16-1","1:9.18.16-1~deb12u1","1:9.18.16-1~deb12u1~bpo11+1","1:9.18.19-1~deb12u1","1:9.18.19-1~deb12u1~bpo11+1","1:9.18.24-1","1:9.18.24-1~bpo11+1","1:9.18.28-1~deb12u1","1:9.18.28-1~deb12u2","1:9.18.33-1~deb12u2"]},{"source":"osv","ecosystem":"Debian:13","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.20.15-1~deb13u1"}]}],"versions":["1:9.20.11-4","1:9.20.15-1~deb13u1~bpo12+1"]},{"source":"osv","ecosystem":"Debian:14","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.20.15-1"}]}],"versions":["1:9.20.11-4","1:9.20.15-1~deb13u1","1:9.20.15-1~deb13u1~bpo12+1"]},{"source":"osv","ecosystem":"Debian:11","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.16.50-1~deb11u4"}]}],"versions":["1:9.16.15-1","1:9.16.21-1","1:9.16.21-1+hurd.1","1:9.16.22-1~deb11u1","1:9.16.22-1~deb11u1~bpo10+1","1:9.16.27-1~deb11u1","1:9.16.27-1~deb11u1~bpo10+1","1:9.16.33-1~deb11u1","1:9.16.37-1~deb11u1","1:9.16.42-1~deb11u1","1:9.16.44-1~deb11u1","1:9.16.48-1","1:9.16.50-1~deb11u1","1:9.16.50-1~deb11u2","1:9.16.50-1~deb11u3"],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.41-1~deb12u1"}]}],"versions":["1:9.18.12-1","1:9.18.13-1","1:9.18.16-1","1:9.18.16-1~deb12u1","1:9.18.16-1~deb12u1~bpo11+1","1:9.18.19-1~deb12u1","1:9.18.19-1~deb12u1~bpo11+1","1:9.18.24-1","1:9.18.24-1~bpo11+1","1:9.18.28-1~deb12u1","1:9.18.28-1~deb12u2","1:9.18.33-1~deb12u2"],"bundled":3},{"source":"osv","ecosystem":"Debian:13","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.20.15-1~deb13u1"}]}],"versions":["1:9.20.11-4","1:9.20.15-1~deb13u1~bpo12+1"],"bundled":3},{"source":"osv","ecosystem":"Mageia:9","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.39-1.1.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.21-5.oe2403sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.21-5.oe2403"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.21-5.oe2403sp2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-4.el10_0.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-4.el10_0.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-4.el10_0.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-4.el10_0.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-4.el10_0.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-4.el10_0.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-4.el10_0.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-4.el10_0.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-4.el10_0.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-4.el10_0.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-4.el10_0.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-4.el10_0.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-4.el10_0.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-4.el9_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.18.48-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.18.48-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.18.48-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.18.48-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.18.48-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.18.48-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.18.48-1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:10","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.18.33-10.el10_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:9","package":"bind9.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.18.29-5.el9_7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:9","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.16.23-40.el9_8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.15-150700.3.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.15-150700.3.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.33-150600.3.18.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.33-150600.3.18.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.33-150600.3.18.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.15-160000.1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.15-160000.1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.9.5.dfsg-3ubuntu0.19+esm15"}]}],"versions":["1:9.9.3.dfsg.P2-4ubuntu1","1:9.9.3.dfsg.P2-4ubuntu2","1:9.9.3.dfsg.P2-4ubuntu3","1:9.9.5.dfsg-2","1:9.9.5.dfsg-3","1:9.9.5.dfsg-3ubuntu0.1","1:9.9.5.dfsg-3ubuntu0.2","1:9.9.5.dfsg-3ubuntu0.3","1:9.9.5.dfsg-3ubuntu0.4","1:9.9.5.dfsg-3ubuntu0.5","1:9.9.5.dfsg-3ubuntu0.6","1:9.9.5.dfsg-3ubuntu0.7","1:9.9.5.dfsg-3ubuntu0.8","1:9.9.5.dfsg-3ubuntu0.9","1:9.9.5.dfsg-3ubuntu0.10","1:9.9.5.dfsg-3ubuntu0.11","1:9.9.5.dfsg-3ubuntu0.12","1:9.9.5.dfsg-3ubuntu0.13","1:9.9.5.dfsg-3ubuntu0.14","1:9.9.5.dfsg-3ubuntu0.15","1:9.9.5.dfsg-3ubuntu0.16","1:9.9.5.dfsg-3ubuntu0.17","1:9.9.5.dfsg-3ubuntu0.18","1:9.9.5.dfsg-3ubuntu0.19","1:9.9.5.dfsg-3ubuntu0.19+esm1","1:9.9.5.dfsg-3ubuntu0.19+esm2","1:9.9.5.dfsg-3ubuntu0.19+esm3","1:9.9.5.dfsg-3ubuntu0.19+esm4","1:9.9.5.dfsg-3ubuntu0.19+esm5","1:9.9.5.dfsg-3ubuntu0.19+esm6","1:9.9.5.dfsg-3ubuntu0.19+esm7","1:9.9.5.dfsg-3ubuntu0.19+esm9","1:9.9.5.dfsg-3ubuntu0.19+esm10","1:9.9.5.dfsg-3ubuntu0.19+esm11","1:9.9.5.dfsg-3ubuntu0.19+esm12","1:9.9.5.dfsg-3ubuntu0.19+esm13","1:9.9.5.dfsg-3ubuntu0.19+esm14"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.10.3.dfsg.P4-8ubuntu1.19+esm11"}]}],"versions":["1:9.9.5.dfsg-11ubuntu1","1:9.9.5.dfsg-12","1:9.9.5.dfsg-12.1","1:9.9.5.dfsg-12.1ubuntu1","1:9.10.3.dfsg.P2-4","1:9.10.3.dfsg.P2-5","1:9.10.3.dfsg.P4-3","1:9.10.3.dfsg.P4-4","1:9.10.3.dfsg.P4-5","1:9.10.3.dfsg.P4-8","1:9.10.3.dfsg.P4-8ubuntu1","1:9.10.3.dfsg.P4-8ubuntu1.1","1:9.10.3.dfsg.P4-8ubuntu1.2","1:9.10.3.dfsg.P4-8ubuntu1.3","1:9.10.3.dfsg.P4-8ubuntu1.4","1:9.10.3.dfsg.P4-8ubuntu1.5","1:9.10.3.dfsg.P4-8ubuntu1.6","1:9.10.3.dfsg.P4-8ubuntu1.7","1:9.10.3.dfsg.P4-8ubuntu1.8","1:9.10.3.dfsg.P4-8ubuntu1.9","1:9.10.3.dfsg.P4-8ubuntu1.10","1:9.10.3.dfsg.P4-8ubuntu1.11","1:9.10.3.dfsg.P4-8ubuntu1.12","1:9.10.3.dfsg.P4-8ubuntu1.14","1:9.10.3.dfsg.P4-8ubuntu1.15","1:9.10.3.dfsg.P4-8ubuntu1.16","1:9.10.3.dfsg.P4-8ubuntu1.17","1:9.10.3.dfsg.P4-8ubuntu1.18","1:9.10.3.dfsg.P4-8ubuntu1.19","1:9.10.3.dfsg.P4-8ubuntu1.19+esm1","1:9.10.3.dfsg.P4-8ubuntu1.19+esm2","1:9.10.3.dfsg.P4-8ubuntu1.19+esm3","1:9.10.3.dfsg.P4-8ubuntu1.19+esm5","1:9.10.3.dfsg.P4-8ubuntu1.19+esm6","1:9.10.3.dfsg.P4-8ubuntu1.19+esm7","1:9.10.3.dfsg.P4-8ubuntu1.19+esm8","1:9.10.3.dfsg.P4-8ubuntu1.19+esm9","1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.19+esm6"}]}],"versions":["1:9.10.3.dfsg.P4-12.6ubuntu1","1:9.11.2.P1-1ubuntu2","1:9.11.2.P1-1ubuntu3","1:9.11.2.P1-1ubuntu4","1:9.11.2.P1-1ubuntu5","1:9.11.3+dfsg-1ubuntu1","1:9.11.3+dfsg-1ubuntu1.1","1:9.11.3+dfsg-1ubuntu1.2","1:9.11.3+dfsg-1ubuntu1.3","1:9.11.3+dfsg-1ubuntu1.5","1:9.11.3+dfsg-1ubuntu1.7","1:9.11.3+dfsg-1ubuntu1.8","1:9.11.3+dfsg-1ubuntu1.9","1:9.11.3+dfsg-1ubuntu1.10","1:9.11.3+dfsg-1ubuntu1.11","1:9.11.3+dfsg-1ubuntu1.12","1:9.11.3+dfsg-1ubuntu1.13","1:9.11.3+dfsg-1ubuntu1.14","1:9.11.3+dfsg-1ubuntu1.15","1:9.11.3+dfsg-1ubuntu1.16","1:9.11.3+dfsg-1ubuntu1.17","1:9.11.3+dfsg-1ubuntu1.18","1:9.11.3+dfsg-1ubuntu1.19+esm1","1:9.11.3+dfsg-1ubuntu1.19+esm2","1:9.11.3+dfsg-1ubuntu1.19+esm3","1:9.11.3+dfsg-1ubuntu1.19+esm4","1:9.11.3+dfsg-1ubuntu1.19+esm5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.5-3ubuntu2","4.3.5-3ubuntu3","4.3.5-3ubuntu4","4.3.5-3ubuntu5","4.3.5-3ubuntu6","4.3.5-3ubuntu7","4.3.5-3ubuntu7.1","4.3.5-3ubuntu7.2","4.3.5-3ubuntu7.3","4.3.5-3ubuntu7.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+esm1"}]}],"versions":["1:9.11.5.P4+dfsg-5.1ubuntu2","1:9.11.5.P4+dfsg-5.1ubuntu3","1:9.11.5.P4+dfsg-5.1ubuntu4","1:9.11.5.P4+dfsg-5.1ubuntu5","1:9.11.14+dfsg-1ubuntu1","1:9.11.14+dfsg-3ubuntu1","1:9.16.0-1ubuntu3","1:9.16.0-1ubuntu4","1:9.16.0-1ubuntu5","1:9.16.1-0ubuntu1","1:9.16.1-0ubuntu2","1:9.16.1-0ubuntu2.1","1:9.16.1-0ubuntu2.2","1:9.16.1-0ubuntu2.3","1:9.16.1-0ubuntu2.4","1:9.16.1-0ubuntu2.6","1:9.16.1-0ubuntu2.7","1:9.16.1-0ubuntu2.8","1:9.16.1-0ubuntu2.9","1:9.16.1-0ubuntu2.10","1:9.16.1-0ubuntu2.11","1:9.16.1-0ubuntu2.12","1:9.16.1-0ubuntu2.14","1:9.16.1-0ubuntu2.15","1:9.16.1-0ubuntu2.16","1:9.16.48-0ubuntu0.20.04.1","1:9.18.28-0ubuntu0.20.04.1","1:9.18.30-0ubuntu0.20.04.1","1:9.18.30-0ubuntu0.20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"bind9-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9.11.16+dfsg-3~build1","1:9.11.16+dfsg-3~ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.39-0ubuntu0.22.04.2"}]}],"versions":["1:9.16.15-1ubuntu1","1:9.16.15-1ubuntu2","1:9.16.15-1ubuntu3","1:9.18.0-2ubuntu1","1:9.18.0-2ubuntu2","1:9.18.0-2ubuntu3","1:9.18.1-1ubuntu1","1:9.18.1-1ubuntu1.1","1:9.18.1-1ubuntu1.2","1:9.18.1-1ubuntu1.3","1:9.18.12-0ubuntu0.22.04.1","1:9.18.12-0ubuntu0.22.04.2","1:9.18.12-0ubuntu0.22.04.3","1:9.18.18-0ubuntu0.22.04.1","1:9.18.18-0ubuntu0.22.04.2","1:9.18.24-0ubuntu0.22.04.1","1:9.18.28-0ubuntu0.22.04.1","1:9.18.30-0ubuntu0.22.04.1","1:9.18.30-0ubuntu0.22.04.2","1:9.18.39-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bind9-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9.11.19+dfsg-2.1ubuntu1","1:9.11.19+dfsg-2.1ubuntu2","1:9.11.19+dfsg-2.1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.39-0ubuntu0.24.04.2"}]}],"versions":["1:9.18.18-0ubuntu2","1:9.18.21-0ubuntu1","1:9.18.24-0ubuntu3","1:9.18.24-0ubuntu4","1:9.18.24-0ubuntu5","1:9.18.28-0ubuntu0.24.04.1","1:9.18.30-0ubuntu0.24.04.1","1:9.18.30-0ubuntu0.24.04.2","1:9.18.39-0ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.3-P1-2ubuntu5","4.4.3-P1-4ubuntu1","4.4.3-P1-4ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.20.11-1ubuntu2.1"}]}],"versions":["1:9.20.4-3ubuntu1","1:9.20.4-3ubuntu2","1:9.20.4-3ubuntu3","1:9.20.9-2ubuntu1","1:9.20.10-1ubuntu1","1:9.20.11-1ubuntu1","1:9.20.11-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.3-P1-4ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.20.11-1ubuntu3"}]}],"versions":["1:9.20.11-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.3-P1-4ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.39-0ubuntu0.22.04.2"}]}],"versions":["1:9.16.15-1ubuntu1","1:9.16.15-1ubuntu2","1:9.16.15-1ubuntu3","1:9.18.0-2ubuntu1","1:9.18.0-2ubuntu2","1:9.18.0-2ubuntu3","1:9.18.1-1ubuntu1","1:9.18.1-1ubuntu1.1","1:9.18.1-1ubuntu1.2","1:9.18.1-1ubuntu1.3","1:9.18.12-0ubuntu0.22.04.1","1:9.18.12-0ubuntu0.22.04.2","1:9.18.12-0ubuntu0.22.04.3","1:9.18.18-0ubuntu0.22.04.1","1:9.18.18-0ubuntu0.22.04.2","1:9.18.24-0ubuntu0.22.04.1","1:9.18.28-0ubuntu0.22.04.1","1:9.18.30-0ubuntu0.22.04.1","1:9.18.30-0ubuntu0.22.04.2","1:9.18.39-0ubuntu0.22.04.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.39-0ubuntu0.24.04.2"}]}],"versions":["1:9.18.18-0ubuntu2","1:9.18.21-0ubuntu1","1:9.18.24-0ubuntu3","1:9.18.24-0ubuntu4","1:9.18.24-0ubuntu5","1:9.18.28-0ubuntu0.24.04.1","1:9.18.30-0ubuntu0.24.04.1","1:9.18.30-0ubuntu0.24.04.2","1:9.18.39-0ubuntu0.24.04.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.20.11-1ubuntu2.1"}]}],"versions":["1:9.20.4-3ubuntu1","1:9.20.4-3ubuntu2","1:9.20.4-3ubuntu3","1:9.20.9-2ubuntu1","1:9.20.10-1ubuntu1","1:9.20.11-1ubuntu1","1:9.20.11-1ubuntu2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+esm1"}]}],"versions":["1:9.11.5.P4+dfsg-5.1ubuntu2","1:9.11.5.P4+dfsg-5.1ubuntu3","1:9.11.5.P4+dfsg-5.1ubuntu4","1:9.11.5.P4+dfsg-5.1ubuntu5","1:9.11.14+dfsg-1ubuntu1","1:9.11.14+dfsg-3ubuntu1","1:9.16.0-1ubuntu3","1:9.16.0-1ubuntu4","1:9.16.0-1ubuntu5","1:9.16.1-0ubuntu1","1:9.16.1-0ubuntu2","1:9.16.1-0ubuntu2.1","1:9.16.1-0ubuntu2.2","1:9.16.1-0ubuntu2.3","1:9.16.1-0ubuntu2.4","1:9.16.1-0ubuntu2.6","1:9.16.1-0ubuntu2.7","1:9.16.1-0ubuntu2.8","1:9.16.1-0ubuntu2.9","1:9.16.1-0ubuntu2.10","1:9.16.1-0ubuntu2.11","1:9.16.1-0ubuntu2.12","1:9.16.1-0ubuntu2.14","1:9.16.1-0ubuntu2.15","1:9.16.1-0ubuntu2.16","1:9.16.48-0ubuntu0.20.04.1","1:9.18.28-0ubuntu0.20.04.1","1:9.18.30-0ubuntu0.20.04.1","1:9.18.30-0ubuntu0.20.04.2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.9.5.dfsg-3ubuntu0.19+esm15"}]}],"versions":["1:9.9.3.dfsg.P2-4ubuntu1","1:9.9.3.dfsg.P2-4ubuntu2","1:9.9.3.dfsg.P2-4ubuntu3","1:9.9.5.dfsg-2","1:9.9.5.dfsg-3","1:9.9.5.dfsg-3ubuntu0.1","1:9.9.5.dfsg-3ubuntu0.2","1:9.9.5.dfsg-3ubuntu0.3","1:9.9.5.dfsg-3ubuntu0.4","1:9.9.5.dfsg-3ubuntu0.5","1:9.9.5.dfsg-3ubuntu0.6","1:9.9.5.dfsg-3ubuntu0.7","1:9.9.5.dfsg-3ubuntu0.8","1:9.9.5.dfsg-3ubuntu0.9","1:9.9.5.dfsg-3ubuntu0.10","1:9.9.5.dfsg-3ubuntu0.11","1:9.9.5.dfsg-3ubuntu0.12","1:9.9.5.dfsg-3ubuntu0.13","1:9.9.5.dfsg-3ubuntu0.14","1:9.9.5.dfsg-3ubuntu0.15","1:9.9.5.dfsg-3ubuntu0.16","1:9.9.5.dfsg-3ubuntu0.17","1:9.9.5.dfsg-3ubuntu0.18","1:9.9.5.dfsg-3ubuntu0.19","1:9.9.5.dfsg-3ubuntu0.19+esm1","1:9.9.5.dfsg-3ubuntu0.19+esm2","1:9.9.5.dfsg-3ubuntu0.19+esm3","1:9.9.5.dfsg-3ubuntu0.19+esm4","1:9.9.5.dfsg-3ubuntu0.19+esm5","1:9.9.5.dfsg-3ubuntu0.19+esm6","1:9.9.5.dfsg-3ubuntu0.19+esm7","1:9.9.5.dfsg-3ubuntu0.19+esm9","1:9.9.5.dfsg-3ubuntu0.19+esm10","1:9.9.5.dfsg-3ubuntu0.19+esm11","1:9.9.5.dfsg-3ubuntu0.19+esm12","1:9.9.5.dfsg-3ubuntu0.19+esm13","1:9.9.5.dfsg-3ubuntu0.19+esm14"],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.10.3.dfsg.P4-8ubuntu1.19+esm11"}]}],"versions":["1:9.9.5.dfsg-11ubuntu1","1:9.9.5.dfsg-12","1:9.9.5.dfsg-12.1","1:9.9.5.dfsg-12.1ubuntu1","1:9.10.3.dfsg.P2-4","1:9.10.3.dfsg.P2-5","1:9.10.3.dfsg.P4-3","1:9.10.3.dfsg.P4-4","1:9.10.3.dfsg.P4-5","1:9.10.3.dfsg.P4-8","1:9.10.3.dfsg.P4-8ubuntu1","1:9.10.3.dfsg.P4-8ubuntu1.1","1:9.10.3.dfsg.P4-8ubuntu1.2","1:9.10.3.dfsg.P4-8ubuntu1.3","1:9.10.3.dfsg.P4-8ubuntu1.4","1:9.10.3.dfsg.P4-8ubuntu1.5","1:9.10.3.dfsg.P4-8ubuntu1.6","1:9.10.3.dfsg.P4-8ubuntu1.7","1:9.10.3.dfsg.P4-8ubuntu1.8","1:9.10.3.dfsg.P4-8ubuntu1.9","1:9.10.3.dfsg.P4-8ubuntu1.10","1:9.10.3.dfsg.P4-8ubuntu1.11","1:9.10.3.dfsg.P4-8ubuntu1.12","1:9.10.3.dfsg.P4-8ubuntu1.14","1:9.10.3.dfsg.P4-8ubuntu1.15","1:9.10.3.dfsg.P4-8ubuntu1.16","1:9.10.3.dfsg.P4-8ubuntu1.17","1:9.10.3.dfsg.P4-8ubuntu1.18","1:9.10.3.dfsg.P4-8ubuntu1.19","1:9.10.3.dfsg.P4-8ubuntu1.19+esm1","1:9.10.3.dfsg.P4-8ubuntu1.19+esm2","1:9.10.3.dfsg.P4-8ubuntu1.19+esm3","1:9.10.3.dfsg.P4-8ubuntu1.19+esm5","1:9.10.3.dfsg.P4-8ubuntu1.19+esm6","1:9.10.3.dfsg.P4-8ubuntu1.19+esm7","1:9.10.3.dfsg.P4-8ubuntu1.19+esm8","1:9.10.3.dfsg.P4-8ubuntu1.19+esm9","1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.19+esm6"}]}],"versions":["1:9.10.3.dfsg.P4-12.6ubuntu1","1:9.11.2.P1-1ubuntu2","1:9.11.2.P1-1ubuntu3","1:9.11.2.P1-1ubuntu4","1:9.11.2.P1-1ubuntu5","1:9.11.3+dfsg-1ubuntu1","1:9.11.3+dfsg-1ubuntu1.1","1:9.11.3+dfsg-1ubuntu1.2","1:9.11.3+dfsg-1ubuntu1.3","1:9.11.3+dfsg-1ubuntu1.5","1:9.11.3+dfsg-1ubuntu1.7","1:9.11.3+dfsg-1ubuntu1.8","1:9.11.3+dfsg-1ubuntu1.9","1:9.11.3+dfsg-1ubuntu1.10","1:9.11.3+dfsg-1ubuntu1.11","1:9.11.3+dfsg-1ubuntu1.12","1:9.11.3+dfsg-1ubuntu1.13","1:9.11.3+dfsg-1ubuntu1.14","1:9.11.3+dfsg-1ubuntu1.15","1:9.11.3+dfsg-1ubuntu1.16","1:9.11.3+dfsg-1ubuntu1.17","1:9.11.3+dfsg-1ubuntu1.18","1:9.11.3+dfsg-1ubuntu1.19+esm1","1:9.11.3+dfsg-1ubuntu1.19+esm2","1:9.11.3+dfsg-1ubuntu1.19+esm3","1:9.11.3+dfsg-1ubuntu1.19+esm4","1:9.11.3+dfsg-1ubuntu1.19+esm5"],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+esm3"}]}],"versions":["1:9.11.5.P4+dfsg-5.1ubuntu2","1:9.11.5.P4+dfsg-5.1ubuntu3","1:9.11.5.P4+dfsg-5.1ubuntu4","1:9.11.5.P4+dfsg-5.1ubuntu5","1:9.11.14+dfsg-1ubuntu1","1:9.11.14+dfsg-3ubuntu1","1:9.16.0-1ubuntu3","1:9.16.0-1ubuntu4","1:9.16.0-1ubuntu5","1:9.16.1-0ubuntu1","1:9.16.1-0ubuntu2","1:9.16.1-0ubuntu2.1","1:9.16.1-0ubuntu2.2","1:9.16.1-0ubuntu2.3","1:9.16.1-0ubuntu2.4","1:9.16.1-0ubuntu2.6","1:9.16.1-0ubuntu2.7","1:9.16.1-0ubuntu2.8","1:9.16.1-0ubuntu2.9","1:9.16.1-0ubuntu2.10","1:9.16.1-0ubuntu2.11","1:9.16.1-0ubuntu2.12","1:9.16.1-0ubuntu2.14","1:9.16.1-0ubuntu2.15","1:9.16.1-0ubuntu2.16","1:9.16.48-0ubuntu0.20.04.1","1:9.18.28-0ubuntu0.20.04.1","1:9.18.30-0ubuntu0.20.04.1","1:9.18.30-0ubuntu0.20.04.2","1:9.18.30-0ubuntu0.20.04.2+esm1","1:9.18.30-0ubuntu0.20.04.2+esm2"],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.39-0ubuntu0.22.04.7"}]}],"versions":["1:9.16.15-1ubuntu1","1:9.16.15-1ubuntu2","1:9.16.15-1ubuntu3","1:9.18.0-2ubuntu1","1:9.18.0-2ubuntu2","1:9.18.0-2ubuntu3","1:9.18.1-1ubuntu1","1:9.18.1-1ubuntu1.1","1:9.18.1-1ubuntu1.2","1:9.18.1-1ubuntu1.3","1:9.18.12-0ubuntu0.22.04.1","1:9.18.12-0ubuntu0.22.04.2","1:9.18.12-0ubuntu0.22.04.3","1:9.18.18-0ubuntu0.22.04.1","1:9.18.18-0ubuntu0.22.04.2","1:9.18.24-0ubuntu0.22.04.1","1:9.18.28-0ubuntu0.22.04.1","1:9.18.30-0ubuntu0.22.04.1","1:9.18.30-0ubuntu0.22.04.2","1:9.18.39-0ubuntu0.22.04.1","1:9.18.39-0ubuntu0.22.04.2","1:9.18.39-0ubuntu0.22.04.3","1:9.18.39-0ubuntu0.22.04.4","1:9.18.39-0ubuntu0.22.04.5","1:9.18.39-0ubuntu0.22.04.6"],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.39-0ubuntu0.24.04.8"}]}],"versions":["1:9.18.18-0ubuntu2","1:9.18.21-0ubuntu1","1:9.18.24-0ubuntu3","1:9.18.24-0ubuntu4","1:9.18.24-0ubuntu5","1:9.18.28-0ubuntu0.24.04.1","1:9.18.30-0ubuntu0.24.04.1","1:9.18.30-0ubuntu0.24.04.2","1:9.18.39-0ubuntu0.24.04.1","1:9.18.39-0ubuntu0.24.04.2","1:9.18.39-0ubuntu0.24.04.3","1:9.18.39-0ubuntu0.24.04.5","1:9.18.39-0ubuntu0.24.04.6","1:9.18.39-0ubuntu0.24.04.7"],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.20.24-1ubuntu0.4"}]}],"versions":["1:9.20.11-1ubuntu2","1:9.20.11-1ubuntu3","1:9.20.18-1ubuntu1","1:9.20.18-1ubuntu2","1:9.20.18-1ubuntu2.1","1:9.20.24-1ubuntu0.1","1:9.20.24-1ubuntu0.2","1:9.20.24-1ubuntu0.3"],"bundled":24},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.15-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.15-160000.1.1"}]}],"bundled":3}],"products":[{"vendor":"isc","product":"bind 9"}],"references":[{"url":"https://kb.isc.org/docs/cve-2025-8677","tags":["vendor-advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2025/10/22/1"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8677","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-924g-f9mr-cm6x"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-8677","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:19912","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-40778","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-40780","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-8677","tags":["report"]},{"url":"https://bugzilla.redhat.com/2405827","tags":["report"]},{"url":"https://bugzilla.redhat.com/2405829","tags":["report"]},{"url":"https://bugzilla.redhat.com/2405830","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-19912.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:19950","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-19950.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:21034","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-21034.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:21111","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-21111.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:18786","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-18786.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-8677","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1782147734.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1782473390.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1787731848.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40778","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1519","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1792648513.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10723","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10822","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11721","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19033","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19662","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19668","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19941","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75029","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77119","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78301","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-8677","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0254.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34696","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/10/22/1","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2654","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40780","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2717","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2718","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2405827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2405829","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2405830","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19912.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-8677","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-40778","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-40780","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19950.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21034.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21111.json","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.8_release_notes/index","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-79714","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18786.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6935","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13878","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3591","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3119","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3104","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-1519","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6935.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2431600","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13878","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13878","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2451305","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-1519","tags":["advisory"]},{"url":"https://downloads.isc.org/isc/bind9/9.18.47","tags":["article"]},{"url":"https://downloads.isc.org/isc/bind9/9.20.21","tags":["article"]},{"url":"https://downloads.isc.org/isc/bind9/9.21.20","tags":["article"]},{"url":"https://kb.isc.org/docs/cve-2026-1519","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2451310","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3104","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3104","tags":["advisory"]},{"url":"https://kb.isc.org/docs/cve-2026-3104","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2451308","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3119","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3119","tags":["advisory"]},{"url":"https://kb.isc.org/docs/cve-2026-3119","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2451298","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3591","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3591","tags":["advisory"]},{"url":"https://kb.isc.org/docs/cve-2026-3591","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2025:21034","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:21111","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:18786","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253903-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1252378","tags":["report"]},{"url":"https://bugzilla.suse.com/1252379","tags":["report"]},{"url":"https://bugzilla.suse.com/1252380","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8677","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254110-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620085-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1230649","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-8677","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7836-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7836-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8929-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-40778","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-40780","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-1519","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-10723","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-10822","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-11331","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-11622","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-11721","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-13204","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-13321","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-19033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-19662","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-19666","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-19667","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-19668","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-19941","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-75029","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-76163","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-77119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-77692","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-78301","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80274","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81563","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81736","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-8677","title":"Resource exhaustion via malformed DNSKEY handling","description":"Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.","status":"published","published":"2025-10-22T15:43:10.369Z","modified":"2025-11-04T21:15:09.556Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-405"],"updated_at":"2026-11-02T14:32:38.025852Z"}],"euvd":[{"id":"EUVD-2025-35583","description":"Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.","status":"published","published":"2025-10-22T15:43:10Z","modified":"2025-11-04T21:15:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:20.707326Z"}],"ghsa":[{"id":"GHSA-924g-f9mr-cm6x","title":"Querying for records within a specially crafted zone containing certain malformed DNSKEY records...","description":"Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.","status":"published","published":"2025-10-22T18:30:38Z","modified":"2025-11-05T00:32:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-405"],"updated_at":"2026-11-02T15:04:39.50413Z"}],"nvd":[{"id":"CVE-2025-8677","description":"Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.","status":"published","published":"2025-10-22T16:15:46.043Z","modified":"2026-10-08T11:10:00.25Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-405"],"updated_at":"2026-11-02T14:11:39.579859Z"}],"osv":[{"id":"ALPINE-CVE-2025-8677","description":"Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.","status":"published","published":"2025-10-22T16:15:46.043Z","modified":"2026-08-27T22:18:03.0610274Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:50.269992Z"},{"id":"BELL-CVE-2025-8677","status":"published","published":"2025-10-23T06:05:07.634317Z","modified":"2026-01-26T09:41:05.819707Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:22.77042Z"},{"id":"DEBIAN-CVE-2025-8677","description":"Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.","status":"published","published":"2025-10-22T16:15:46.043Z","modified":"2026-10-09T09:47:23.399890063Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:48.440897Z"},{"id":"OESA-2025-2654","title":"bind security update","description":"Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.\r\n\r\nSecurity Fix(es):\n\nUnder certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)\n\nIn specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40780)\n\nQuerying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-8677)","status":"published","published":"2025-11-14T11:09:46Z","modified":"2026-08-18T01:19:18.865224763Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2717","title":"bind security update","description":"Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.\r\n\r\nSecurity Fix(es):\n\nUnder certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache.\nThis issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)\n\nIn specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use.\nThis issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40780)\n\nQuerying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-8677)","status":"published","published":"2025-11-22T11:09:50Z","modified":"2026-08-18T01:19:19.917993116Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2718","title":"bind security update","description":"Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.\r\n\r\nSecurity Fix(es):\n\nUnder certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache.\nThis issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)\n\nIn specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use.\nThis issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40780)\n\nQuerying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-8677)","status":"published","published":"2025-11-22T11:09:50Z","modified":"2026-08-18T01:19:20.208910637Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"RHSA-2025:19912","title":"Red Hat Security Advisory: bind security update","status":"published","published":"2025-11-07T10:48:41Z","modified":"2026-10-14T10:08:43Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:16.096024Z"},{"id":"RHSA-2025:19950","title":"Red Hat Security Advisory: bind9.18 security update","status":"published","published":"2025-11-10T10:03:42Z","modified":"2026-10-14T10:08:43Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:16.096024Z"},{"id":"RHSA-2025:21034","title":"Red Hat Security Advisory: bind security update","status":"published","published":"2025-11-12T10:28:29Z","modified":"2026-10-14T10:08:47Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:21111","title":"Red Hat Security Advisory: bind9.18 security update","status":"published","published":"2025-11-13T10:07:23Z","modified":"2026-10-14T10:08:49Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2026:18786","title":"Red Hat Security Advisory: bind security update","status":"published","published":"2026-05-20T10:09:28Z","modified":"2026-09-02T10:11:02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:6935","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-20T10:10:53Z","modified":"2026-10-14T10:28:20Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RLSA-2025:21034","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)\n\n* bind: Cache poisoning due to weak PRNG (CVE-2025-40780)\n\n* bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-11-21T18:19:15.687303Z","modified":"2025-11-21T18:49:01.898342Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:21111","title":"Important: bind9.18 security update","description":"BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.\n\nSecurity Fix(es):\n\n* bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)\n\n* bind: Cache poisoning due to weak PRNG (CVE-2025-40780)\n\n* bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-11-21T18:13:51.682496Z","modified":"2025-11-21T18:49:02.741Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2026:18786","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.","status":"published","published":"2026-05-28T15:43:06.024531Z","modified":"2026-05-28T16:00:23.987676306Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"UBUNTU-CVE-2025-8677","description":"Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.","status":"published","published":"2025-10-22T00:00:00Z","modified":"2026-10-17T13:11:53.898908943Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:55.926217Z"},{"id":"ALSA-2025:19912","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  \n\nSecurity Fix(es):  \n\n  * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)\n  * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)\n  * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-11-06T00:00:00Z","modified":"2026-10-29T11:30:04.064888881Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:19950","title":"Important: bind9.18 security update","description":"BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.  \n\nSecurity Fix(es):  \n\n  * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)\n  * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)\n  * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-11-10T00:00:00Z","modified":"2026-10-29T11:32:28.431198849Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:21034","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  \n\nSecurity Fix(es):  \n\n  * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)\n  * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)\n  * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-11-11T00:00:00Z","modified":"2026-10-29T11:58:16.275014Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:21111","title":"Important: bind9.18 security update","description":"BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.  \n\nSecurity Fix(es):  \n\n  * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)\n  * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)\n  * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-11-12T00:00:00Z","modified":"2026-10-29T11:32:29.018905104Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2026:18786","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  \n\nSecurity Fix(es):  \n\n  * bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-10-29T11:32:31.057280144Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"AZL-68733","title":"CVE-2025-8677 affecting package bind for versions less than 9.16.50-3","description":"Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.","status":"published","published":"2025-10-22T16:15:46Z","modified":"2026-04-21T04:38:29.050644Z","updated_at":"2026-11-02T15:28:08.630357Z"},{"id":"AZL-68742","title":"CVE-2025-8677 affecting package bind for versions less than 9.20.15-1","description":"Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.","status":"published","published":"2025-10-22T16:15:46Z","modified":"2026-04-21T04:53:00.507227Z","updated_at":"2026-11-02T15:28:08.630357Z"},{"id":"CLSA-2026-1782147734","title":"bind: Fix of CVE-2025-8677","description":"- CVE-2025-8677: fail DNSSEC validation on a matching but cryptographically\n  invalid DNSKEY instead of skipping it, preventing CPU exhaustion from\n  malformed DNSKEY records in a specially crafted zone","status":"published","published":"2026-06-22T17:02:26Z","modified":"2026-10-26T09:30:22.38549495Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1782473390","title":"bind: Fix of CVE-2025-8677","description":"- CVE-2025-8677: fail DNSSEC validation on a matching but cryptographically\n  invalid DNSKEY instead of skipping it, preventing CPU exhaustion from\n  malformed DNSKEY records in a specially crafted zone","status":"published","published":"2026-06-26T11:30:05Z","modified":"2026-10-26T09:31:09.78208984Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1787731848","title":"Fix CVE(s): CVE-2025-40778, CVE-2025-8677, CVE-2026-1519","description":"   * SECURITY UPDATE: cache poisoning via unsolicited answer records\n     - debian/patches/CVE-2025-40778.patch: require the NS RRset owner name\n       to be an ancestor of the queried name, restrict cached glue to the\n       NS bailiwick apex, and retry unsigned DNAME responses over TCP\n     - CVE-2025-40778\n   * SECURITY UPDATE: excessive NSEC3 iterations CPU denial of service\n     during insecure delegation validation\n     - debian/patches/CVE-2026-1519.patch: cap NSEC3 iterations at\n       DNS_NSEC3_MAXITERATIONS (150) in isdelegation() and skip\n       already-trusted rdatasets during the insecurity proof\n     - CVE-2026-1519","status":"published","published":"2026-08-26T08:11:07Z","modified":"2026-10-26T09:32:03.720857305Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1792648513","title":"Fix of 13 CVEs","description":"   * SECURITY UPDATE: CPU exhaustion via malformed DNSKEY records\n     - debian/patches/CVE-2025-8677.patch: fail validation on invalid DNSKEY\n       in lib/dns/validator.c.\n     - CVE-2025-8677\n   * SECURITY UPDATE: cache poisoning through forged records in answers\n     - debian/patches/CVE-2025-40778.patch: tighten resolver caching rules\n       in lib/dns/resolver.c and lib/dns/message.c, and raise the default\n       max-recursion-queries from 32 to 50 in bin/named/config.c.\n     - CVE-2025-40778\n   * SECURITY UPDATE: assertion failure on malformed PRIVATEDNS DNSKEY records\n     - debian/patches/CVE-2026-10822.patch: make dns_name_fromwire() honour\n       the active region of the source buffer in lib/dns/name.c.\n     - CVE-2026-10822\n   * SECURITY UPDATE: crash from malformed NSEC/NSEC3 response\n     - debian/patches/CVE-2026-13204.patch: treat a missing NOQNAME proof as\n       an error instead of an assertion failure in lib/dns/rbtdb.c,\n       lib/dns/resolver.c and lib/ns/query.c.\n     - CVE-2026-13204\n   * SECURITY UPDATE: forged DNSSEC-validated NXDOMAIN responses\n     - debian/patches/CVE-2026-19941.patch: require NSEC wildcard proofs to\n       be signed by the same zone as the NOQNAME proof in\n       lib/dns/validator.c and lib/dns/include/dns/validator.h.\n     - CVE-2026-19941\n   * SECURITY UPDATE: DNSSEC validation bypass via NSEC3 impersonation\n     - debian/patches/CVE-2026-10723.patch: check that the NSEC3 signer\n       matches the owning zone in lib/dns/dnssec.c and lib/isc/result.c.\n     - CVE-2026-10723\n   * SECURITY UPDATE: excessive CPU use validating crafted DNSSEC responses\n     - debian/patches/CVE-2026-19668.patch: bound the DS-to-DNSKEY matching\n       during DNSSEC validation and make the exhausted quota terminal in\n       lib/dns/validator.c and lib/dns/resolver.c.\n     - CVE-2026-19668\n   * SECURITY UPDATE: use-after-free of cached NOQNAME proofs\n     - debian/patches/CVE-2026-19662.patch: keep the cache slabheader that\n       owns a NOQNAME or closest-encloser proof referenced while the proof\n       rdatasets are in use in lib/dns/rbtdb.c.\n     - CVE-2026-19662\n   * SECURITY UPDATE: out-of-zone data above the apex treated as a zone cut\n     - debian/patches/CVE-2026-78301.patch: ignore nodes above the zone\n       origin in RBT zone database lookups in lib/dns/rbtdb.c.\n     - CVE-2026-78301\n   * SECURITY UPDATE: sparsely signed incoming zone transfers accepted\n     - debian/patches/CVE-2026-19033.patch: require a TSIG on every message\n       of an incoming zone transfer in lib/dns/xfrin.c.\n     - CVE-2026-19033\n   * SECURITY UPDATE: memory amplification via duplicate singleton records\n     - debian/patches/CVE-2026-75029.patch: skip duplicate singleton\n       records when parsing DNS messages in lib/dns/message.c.\n     - CVE-2026-75029\n   * SECURITY UPDATE: DNSSEC downgrade of secure delegations via NSEC3\n     from an unrelated sibling zone\n     - debian/patches/CVE-2026-77119.patch: ignore NSEC3 records whose owner\n       zone does not enclose the DS name in the insecure delegation proof\n       in lib/dns/validator.c.\n     - CVE-2026-77119\n   * SECURITY UPDATE: invalid signed wildcard records accepted\n     - debian/patches/CVE-2026-11721.patch: reject RRSIG records whose labels\n       field is lower than the signer label count when parsing and\n       verifying in lib/dns/rdata/generic/rrsig_46.c and lib/dns/dnssec.c,\n       and do not sign out-of-zone records in bin/dnssec/dnssec-signzone.c.\n     - CVE-2026-11721","status":"published","published":"2026-10-22T05:55:37Z","modified":"2026-10-26T09:43:52.034100877Z","updated_at":"2026-11-02T15:43:54.672859Z"},{"id":"DLA-4364-1","title":"bind9 - security update","status":"published","published":"2025-11-04T00:00:00Z","modified":"2025-11-04T14:33:01.480445Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-6033-1","title":"bind9 - security update","status":"published","published":"2025-10-23T00:00:00Z","modified":"2025-10-23T19:17:32.480994Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0254","title":"Updated bind packages fix security vulnerabilities","description":"Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677).\nCache poisoning attacks with unsolicited RRs (CVE-2025-40778).\nCache poisoning due to weak PRNG (CVE-2025-40780).\n","status":"published","published":"2025-10-31T23:36:04Z","modified":"2026-04-16T04:44:24.218018868Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15659-1","title":"bind-9.20.15-1.1 on GA media","description":"These are all security issues fixed in the bind-9.20.15-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-10-23T00:00:00Z","modified":"2026-03-23T04:54:03.943069Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2026:20039-1","title":"Security update for bind","description":"This update for bind fixes the following issues:\n\n- Upgrade to release 9.20.15\n  Security Fixes:\n  * CVE-2025-40778: Fixed cache poisoning attacks with unsolicited RRs (bsc#1252379)\n  * CVE-2025-40780: Fixed cache poisoning due to weak PRNG (bsc#1252380)\n  * CVE-2025-8677: Fixed resource exhaustion via malformed DNSKEY handling (bsc#1252378)\n\n  New Features:\n  * Add dnssec-policy keys configuration check to named-checkconf.\n  * Add a new option `manual-mode` to dnssec-policy.\n  * Add a new option `servfail-until-ready` to response-policy\n    zones.\n  * Support for parsing HHIT and BRID records has been added.\n  * Support for parsing DSYNC records has been added.\n\n  Removed Features:\n  * Deprecate the `tkey-gssapi-credential` statement.\n  * Obsolete the `tkey-domain` statement.\n\n  Feature Changes:\n  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS\n    digest type 1.\n\n  Bug Fixes:\n  * Missing DNSSEC information when CD bit is set in query.\n  * rndc sign during ZSK rollover will now replace signatures.\n  * Use signer name when disabling DNSSEC algorithms.\n  * Preserve cache when reload fails and reload the server again.\n  * Prevent spurious SERVFAILs for certain 0-TTL resource records.\n  * Fix unexpected termination if catalog-zones had undefined\n    `default-primaries`.\n  * Stale RRsets in a CNAME chain were not always refreshed.\n  * Add RPZ extended DNS error for zones with a CNAME override\n    policy configured.\n  * Fix dig +keepopen option.\n  * Log dropped or slipped responses in the query-errors category.\n  * Fix synth-from-dnssec not working in some scenarios.\n  * Clean enough memory when adding new ADB names/entries under\n    memory pressure.\n  * Prevent spurious validation failures.\n  * Ensure file descriptors 0-2 are in use before using libuv\n    [bsc#1230649]\n","status":"published","published":"2026-01-15T10:43:49Z","modified":"2026-03-23T04:54:42.601949Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2025:3903-1","title":"Security update for bind","description":"This update for bind fixes the following issues:\n\nUpgrade to release 9.20.15:\n\n- CVE-2025-8677: DNSSEC validation fails if matching but invalid DNSKEY is found (bsc#1252378).\n- CVE-2025-40778: Address various spoofing attacks (bsc#1252379).\n- CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380).\n","status":"published","published":"2025-10-31T17:08:27Z","modified":"2026-03-23T04:51:20.297242Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:4110-1","title":"Security update for bind","description":"This update for bind fixes the following issues:\n\n- CVE-2025-8677: DNSSEC validation fails if matching but invalid DNSKEY is found (bsc#1252378).\n- CVE-2025-40778: Address various spoofing attacks (bsc#1252379).\n- CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380).\n","status":"published","published":"2025-11-14T15:56:20Z","modified":"2026-02-04T03:38:16.469195Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2026:20085-1","title":"Security update for bind","description":"This update for bind fixes the following issues:\n\n- Upgrade to release 9.20.15\n  Security Fixes:\n  * CVE-2025-40778: Fixed cache poisoning attacks with unsolicited RRs (bsc#1252379)\n  * CVE-2025-40780: Fixed cache poisoning due to weak PRNG (bsc#1252380)\n  * CVE-2025-8677: Fixed resource exhaustion via malformed DNSKEY handling (bsc#1252378)\n\n  New Features:\n  * Add dnssec-policy keys configuration check to named-checkconf.\n  * Add a new option `manual-mode` to dnssec-policy.\n  * Add a new option `servfail-until-ready` to response-policy\n    zones.\n  * Support for parsing HHIT and BRID records has been added.\n  * Support for parsing DSYNC records has been added.\n\n  Removed Features:\n  * Deprecate the `tkey-gssapi-credential` statement.\n  * Obsolete the `tkey-domain` statement.\n\n  Feature Changes:\n  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS\n    digest type 1.\n\n  Bug Fixes:\n  * Missing DNSSEC information when CD bit is set in query.\n  * rndc sign during ZSK rollover will now replace signatures.\n  * Use signer name when disabling DNSSEC algorithms.\n  * Preserve cache when reload fails and reload the server again.\n  * Prevent spurious SERVFAILs for certain 0-TTL resource records.\n  * Fix unexpected termination if catalog-zones had undefined\n    `default-primaries`.\n  * Stale RRsets in a CNAME chain were not always refreshed.\n  * Add RPZ extended DNS error for zones with a CNAME override\n    policy configured.\n  * Fix dig +keepopen option.\n  * Log dropped or slipped responses in the query-errors category.\n  * Fix synth-from-dnssec not working in some scenarios.\n  * Clean enough memory when adding new ADB names/entries under\n    memory pressure.\n  * Prevent spurious validation failures.\n  * Ensure file descriptors 0-2 are in use before using libuv\n    [bsc#1230649]\n","status":"published","published":"2026-01-15T10:43:50Z","modified":"2026-03-23T04:52:34.244737Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"USN-7836-1","title":"bind9 vulnerabilities","description":"Zuyao Xu and Xiang Li discovered that Bind incorrectly handled certain\nmalformed DNSKEY records. A remote attacker could possibly use this issue\nto cause Bind to consume resources, resulting in a denial of service.\n(CVE-2025-8677)\n\nYuxiao Wu, Yunyi Zhang, Baojun Liu, and Haixin Duan discovered that Bind\nincorrectly accepted certain records from answers. A remote attacker could\npossibly use this issue to perform a cache poisoning attack.\n(CVE-2025-40778)\n\nAmit Klein and Omer Ben Simhon discovered that Bind used a weak PRNG. A\nremote attacker could possibly use this issue to perform a cache poisoning\nattack. (CVE-2025-40780)","status":"published","published":"2025-10-22T17:03:53Z","modified":"2026-04-27T18:23:54.658984Z","updated_at":"2026-11-02T16:58:21.91885Z"},{"id":"USN-7836-2","title":"bind9 vulnerabilities","description":"USN-7836-1 fixed vulnerabilities in Bind. This update provides the\ncorresponding fixes for Ubuntu 20.04 LTS.\n\nOriginal advisory details:\n\n Zuyao Xu and Xiang Li discovered that Bind incorrectly handled certain\n malformed DNSKEY records. A remote attacker could possibly use this issue\n to cause Bind to consume resources, resulting in a denial of service.\n (CVE-2025-8677)\n\n Yuxiao Wu, Yunyi Zhang, Baojun Liu, and Haixin Duan discovered that Bind\n incorrectly accepted certain records from answers. A remote attacker could\n possibly use this issue to perform a cache poisoning attack.\n (CVE-2025-40778)\n\n Amit Klein and Omer Ben Simhon discovered that Bind used a weak PRNG. A\n remote attacker could possibly use this issue to perform a cache poisoning\n attack. (CVE-2025-40780)","status":"published","published":"2025-11-12T15:42:46Z","modified":"2026-04-27T18:23:54.382653Z","updated_at":"2026-11-02T16:58:21.91885Z"},{"id":"USN-8929-1","title":"bind9 vulnerabilities","description":"Zuyao Xu and Xiang Li discovered that Bind incorrectly handled certain\nmalformed DNSKEY records. A remote attacker could possibly use this issue\nto cause Bind to consume resources, resulting in a denial of service. This\nissue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04\nLTS. (CVE-2025-8677)\n\nYuxiao Wu, Yunyi Zhang, Baojun Liu, and Haixin Duan discovered that Bind\nincorrectly accepted certain records from answers. A remote attacker could\npossibly use this issue to perform a cache poisoning attack. This issue\nonly affected Ubuntu 18.04 LTS. (CVE-2025-40778)\n\nSamy Medjahed discovered that Bind incorrectly handled insecure delegation\nvalidation. A remote attacker could possibly use this issue to cause\nexcessive NSEC3 iterations, consuming CPU resources, and leading to a\ndenial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04\nLTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-1519)\n\nIt was discovered that Bind incorrectly accepted NSEC3 records whose signer\nname did not match the owning zone. A remote attacker could possibly use\nthis issue to perform NSEC3 impersonation attacks, bypassing DNSSEC\nvalidation. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS,\nUbuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-10723)\n\nIt was discovered that Bind incorrectly handled Key Records using the\nPRIVATEDNS algorithm. A remote attacker could possibly use this issue to\ncause Bind to crash, resulting in a denial of service. This issue only\naffected Ubuntu 20.04 LTS. (CVE-2026-10822)\n\nIt was discovered that Bind incorrectly handled wildcard CNAME expansion in\nResponse Policy Zones. A remote attacker could possibly use this issue to\nbypass configured RPZ policies. This issue only affected Ubuntu 20.04 LTS.\n(CVE-2026-11331)\n\nIt was discovered that Bind incorrectly tracked memory usage in the DNS\ncache. A remote attacker could possibly use this issue to cause Bind to use\nmemory beyond configured limits, leading to a denial of service. This issue\nonly affected Ubuntu 20.04 LTS. (CVE-2026-11622)\n\nIt was discovered that Bind incorrectly handled signed wildcard records\nwith label count discrepancies and RRSIG validation. A remote attacker\ncould possibly use this issue to perform cache poisoning attacks. This\nissue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,\nand Ubuntu 20.04 LTS. (CVE-2026-11721)\n\nIt was discovered that Bind incorrectly handled DNSSEC validation when a\ndomain was covered by both NSEC and NSEC3 records with only one type having\nan RRSIG. A remote attacker could possibly use this issue to cause Bind to\ncrash, resulting in a denial of service. This issue only affected Ubuntu\n14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.\n(CVE-2026-13204)\n\nIt was discovered that Bind incorrectly validated out-of-zone NSEC next\nowner names during DNSSEC validation. A remote attacker could possibly use\nthis issue to bypass DNSSEC validation. This issue only affected Ubuntu\n14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.\n(CVE-2026-13321)\n\nIt was discovered that Bind incorrectly served zone transfer data before\nverifying the TSIG signature on multi-message transfers. A remote attacker\ncould possibly use this issue to send unauthorized zone contents to a\nsecondary server. (CVE-2026-19033)\n\nIt was discovered that Bind incorrectly handled the lifetime of cached\nDNSSEC proofs, leading to a use-after-free. A remote attacker could\npossibly use this issue to cause Bind to crash, resulting in a denial of\nservice. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,\nUbuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-19662)\n\nIt was discovered that Bind incorrectly handled certain malformed answers\nwhen configured to use DNS64. A remote attacker could possibly use this\nissue to cause Bind to crash, resulting in a denial of service.\n(CVE-2026-19666)\n\nIt was discovered that Bind incorrectly handled oversized negative answers\nwhen storing them in the negative cache. A remote attacker could possibly\nuse this issue to cause Bind to crash, resulting in a denial of service.\nThis issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04\nLTS, and Ubuntu 26.04 LTS. (CVE-2026-19667)\n\nIt was discovered that Bind incorrectly handled large numbers of certain\ninvalid DNSSEC records during validation. A remote attacker could possibly\nuse this issue to cause Bind to use excessive resources, leading to a\ndenial of service. This issue only affected Ubuntu 26.04 LTS.\n(CVE-2026-19668)\n\nIt was discovered that Bind incorrectly accepted inapplicable NSEC records\nas proof that no wildcard existed. A remote attacker could possibly use\nthis issue to forge NXDOMAIN responses, masking the existence of wildcard\nrecords. (CVE-2026-19941)\n\nIt was discovered that Bind incorrectly handled repeated copies of records\nthat should only appear once, such as SOA, CNAME, or DNAME records. A\nremote attacker could possibly use this issue to cause Bind to use\nexcessive memory, leading to a denial of service. (CVE-2026-75029)\n\nIt was discovered that Bind incorrectly handled TKEY queries when the\nconfiguration did not contain a global options block. A remote attacker\ncould possibly use this issue to cause Bind to crash, resulting in a denial\nof service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-76163)\n\nIt was discovered that Bind incorrectly accepted NSEC3 records from\nunrelated sibling zones as proof of an insecure delegation. A remote\nattacker could possibly use this issue to bypass DNSSEC validation and\ninject forged unsigned answers. (CVE-2026-77119)\n\nIt was discovered that Bind incorrectly handled DNS-over-HTTPS requests\ncontaining invalid SIG(0) records when the connection was closed\nprematurely. A remote attacker could possibly use this issue to cause Bind\nto crash, resulting in a denial of service. This issue only affected Ubuntu\n26.04 LTS. (CVE-2026-77692)\n\nIt was discovered that Bind incorrectly treated NS or DNAME records above\nthe zone origin as zone cuts. An attacker could possibly use this issue to\ncause Bind to serve or cache out-of-zone data, resulting in cache\npoisoning. (CVE-2026-78301)\n\nIt was discovered that Bind incorrectly handled wildcard answers with both\nNSEC3 and NSEC proofs at the same owner name. A remote attacker could\npossibly use this issue to cause Bind to crash, resulting in a denial of\nservice. (CVE-2026-80274)\n\nIt was discovered that Bind incorrectly released resources when processing\nSVCB and HTTPS AliasMode records. A remote attacker could possibly use this\nissue to cause Bind to exhaust resources, leading to a denial of service.\nThis issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04\nLTS, and Ubuntu 26.04 LTS. (CVE-2026-81563)\n\nIt was discovered that Bind incorrectly limited additional processing for\ncached SVCB and HTTPS AliasMode records. A remote attacker could possibly\nuse this issue to cause Bind to use excessive CPU resources, leading to a\ndenial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04\nLTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-81736)","status":"published","published":"2026-10-14T13:00:49Z","modified":"2026-10-17T13:11:54.621775565Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}