bind-utils vulnerabilities (Red Hat)
131 vulnerabilities.
bind-utilsRed Hatnamed configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries7.5 Highbind-utilsRed HatAn UPDATE message flood may cause named to exhaust all available memory7.5 Highbind-utilsRed HatMemory leaks in EdDSA DNSSEC verification code7.5 Highbind-utilsRed HatMemory leak in ECDSA DNSSEC verification code7.5 Highbind-utilsRed HatBIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedly7.5 Highbind-utilsRed HatProcessing large delegations may severely degrade resolver performance5.3 Mediumbind-utilsRed HatDoS from specifically crafted TCP packets5.3 Mediumbind-utilsRed HatDNS forwarders - cache poisoning vulnerability6.8 Mediumbind-utilsRed HatLame cache can be abused to severely degrade resolver performance5.3 Mediumbind-utilsRed HatAn assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself7.5 Highbind-utilsRed HatA broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly6.5 Mediumbind-utilsRed HatA vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack8.1 Highbind-utilsRed Hatupdate-policy rules of type "subdomain" are enforced incorrectly4.3 Mediumbind-utilsRed HatA flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c7.5 Highbind-utilsRed HatA truncated TSIG response can lead to an assertion failure6.5 Mediumbind-utilsRed HatA buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer4.9 Mediumbind-utilsRed HatA logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c7.5 Highbind-utilsRed HatBIND does not sufficiently limit the number of fetches performed when processing referrals8.6 Highbind-utilsRed HatTCP-pipelined queries can bypass tcp-clients limit7.5 Highbind-utilsRed HatAn oversight while backporting a feature leads to an assertion failure in buffer.c:4205.9 Mediumbind-utilsRed HatA race condition when discarding malformed packets can cause BIND to exit with an assertion failure5.9 Mediumbind-utilsRed HatLimiting simultaneous TCP clients was ineffective7.5 Highbind-utilsRed HatA denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker...7.5 Highbind-utilsRed HatZone transfer controls for writable DLZ zones were not effective5.3 Mediumbind-utilsRed HatAn assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys4.9 Mediumbind-utilsRed HatUpdate policies krb5-subdomain and ms-subdomain do not enforce controls promised in their documentation6.5 Mediumbind-utilsRed HatA flaw in the "deny-answer-aliases" feature can cause an assertion failure in named7.5 Highbind-utilsRed HatImproper fetch cleanup sequencing in the resolver can cause named to crash7.5 Highbind-utilsRed HatAn error in TSIG authentication can permit unauthorized dynamic updates7.5 Highbind-utilsRed HatAn error in TSIG authentication can permit unauthorized zone transfers5.3 Mediumbind-utilsRed HatA response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME7.5 Highbind-utilsRed HatAn error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"5.9 Mediumbind-utilsRed HatCombination of DNS64 and RPZ Can Lead to Crash7.5 Highbind-utilsRed Hatnamed in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2...7.5 Highbind-utilsRed Hatnamed in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a...7.5 Highbind-utilsRed Hatnamed in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2...7.5 Highbind-utilsRed Hatnamed in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1...7.5 Highbind-utilsRed HatISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a...7.5 Highbind-utilsRed Hatbuffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11...7.5 Highbind-utilsRed HatISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or...5.9 Mediumbind-utilsRed Hatnamed in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to...8.6 Highbind-utilsRed Hatnamed in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME...6.8 Mediumbind-utilsRed Hatapl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote...6.5 Mediumbind-utilsRed Hatdb.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers...5.0 Mediumbind-utilsRed Hatbuffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote...7.8 Highbind-utilsRed Hatnamed in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to...7.8 Highbind-utilsRed Hatname.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when...7.8 Highbind-utilsRed Hatnamed in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC...5.4 Mediumbind-utilsRed HatISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit...7.8 Highbind-utilsRed HatThe query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8...2.6 Low- Show moreLoading…