bind-devel vulnerabilities (Red Hat)
131 vulnerabilities.
bind-develRed Hatnamed configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries7.5 Highbind-develRed HatAn UPDATE message flood may cause named to exhaust all available memory7.5 Highbind-develRed HatMemory leaks in EdDSA DNSSEC verification code7.5 Highbind-develRed HatMemory leak in ECDSA DNSSEC verification code7.5 Highbind-develRed HatBIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedly7.5 Highbind-develRed HatProcessing large delegations may severely degrade resolver performance5.3 Mediumbind-develRed HatDoS from specifically crafted TCP packets5.3 Mediumbind-develRed HatDNS forwarders - cache poisoning vulnerability6.8 Mediumbind-develRed HatLame cache can be abused to severely degrade resolver performance5.3 Mediumbind-develRed HatAn assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself7.5 Highbind-develRed HatA broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly6.5 Mediumbind-develRed HatA vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack8.1 Highbind-develRed Hatupdate-policy rules of type "subdomain" are enforced incorrectly4.3 Mediumbind-develRed HatA flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c7.5 Highbind-develRed HatA truncated TSIG response can lead to an assertion failure6.5 Mediumbind-develRed HatA buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer4.9 Mediumbind-develRed HatA logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c7.5 Highbind-develRed HatBIND does not sufficiently limit the number of fetches performed when processing referrals8.6 Highbind-develRed HatTCP-pipelined queries can bypass tcp-clients limit7.5 Highbind-develRed HatAn oversight while backporting a feature leads to an assertion failure in buffer.c:4205.9 Mediumbind-develRed HatA race condition when discarding malformed packets can cause BIND to exit with an assertion failure5.9 Mediumbind-develRed HatLimiting simultaneous TCP clients was ineffective7.5 Highbind-develRed HatA denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker...7.5 Highbind-develRed HatZone transfer controls for writable DLZ zones were not effective5.3 Mediumbind-develRed HatAn assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys4.9 Mediumbind-develRed HatUpdate policies krb5-subdomain and ms-subdomain do not enforce controls promised in their documentation6.5 Mediumbind-develRed HatA flaw in the "deny-answer-aliases" feature can cause an assertion failure in named7.5 Highbind-develRed HatImproper fetch cleanup sequencing in the resolver can cause named to crash7.5 Highbind-develRed HatAn error in TSIG authentication can permit unauthorized dynamic updates7.5 Highbind-develRed HatAn error in TSIG authentication can permit unauthorized zone transfers5.3 Mediumbind-develRed HatA response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME7.5 Highbind-develRed HatAn error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"5.9 Mediumbind-develRed HatCombination of DNS64 and RPZ Can Lead to Crash7.5 Highbind-develRed Hatnamed in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2...7.5 Highbind-develRed Hatnamed in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a...7.5 Highbind-develRed Hatnamed in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2...7.5 Highbind-develRed Hatnamed in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1...7.5 Highbind-develRed HatISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a...7.5 Highbind-develRed Hatbuffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11...7.5 Highbind-develRed HatISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or...5.9 Mediumbind-develRed Hatnamed in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to...8.6 Highbind-develRed Hatnamed in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME...6.8 Mediumbind-develRed Hatapl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote...6.5 Mediumbind-develRed Hatdb.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers...5.0 Mediumbind-develRed Hatbuffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote...7.8 Highbind-develRed Hatnamed in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to...7.8 Highbind-develRed Hatname.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when...7.8 Highbind-develRed Hatnamed in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC...5.4 Mediumbind-develRed HatISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit...7.8 Highbind-develRed HatThe query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8...2.6 Low- Show moreLoading…