bind vulnerabilities (Red Hat)
131 vulnerabilities.
bindRed Hatnamed configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries7.5 HighbindRed HatAn UPDATE message flood may cause named to exhaust all available memory7.5 HighbindRed HatMemory leaks in EdDSA DNSSEC verification code7.5 HighbindRed HatMemory leak in ECDSA DNSSEC verification code7.5 HighbindRed HatBIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedly7.5 HighbindRed HatProcessing large delegations may severely degrade resolver performance5.3 MediumbindRed HatDoS from specifically crafted TCP packets5.3 MediumbindRed HatDNS forwarders - cache poisoning vulnerability6.8 MediumbindRed HatLame cache can be abused to severely degrade resolver performance5.3 MediumbindRed HatAn assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself7.5 HighbindRed HatA broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly6.5 MediumbindRed HatA vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack8.1 HighbindRed Hatupdate-policy rules of type "subdomain" are enforced incorrectly4.3 MediumbindRed HatA flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c7.5 HighbindRed HatA truncated TSIG response can lead to an assertion failure6.5 MediumbindRed HatA buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer4.9 MediumbindRed HatA logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c7.5 HighbindRed HatBIND does not sufficiently limit the number of fetches performed when processing referrals8.6 HighbindRed HatTCP-pipelined queries can bypass tcp-clients limit7.5 HighbindRed HatAn oversight while backporting a feature leads to an assertion failure in buffer.c:4205.9 MediumbindRed HatA race condition when discarding malformed packets can cause BIND to exit with an assertion failure5.9 MediumbindRed HatLimiting simultaneous TCP clients was ineffective7.5 HighbindRed HatA denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker...7.5 HighbindRed HatZone transfer controls for writable DLZ zones were not effective5.3 MediumbindRed HatAn assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys4.9 MediumbindRed HatUpdate policies krb5-subdomain and ms-subdomain do not enforce controls promised in their documentation6.5 MediumbindRed HatA flaw in the "deny-answer-aliases" feature can cause an assertion failure in named7.5 HighbindRed HatImproper fetch cleanup sequencing in the resolver can cause named to crash7.5 HighbindRed HatAn error in TSIG authentication can permit unauthorized dynamic updates7.5 HighbindRed HatAn error in TSIG authentication can permit unauthorized zone transfers5.3 MediumbindRed HatA response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME7.5 HighbindRed HatAn error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"5.9 MediumbindRed HatCombination of DNS64 and RPZ Can Lead to Crash7.5 HighbindRed Hatnamed in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2...7.5 HighbindRed Hatnamed in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a...7.5 HighbindRed Hatnamed in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2...7.5 HighbindRed Hatnamed in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1...7.5 HighbindRed HatISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a...7.5 HighbindRed Hatbuffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11...7.5 HighbindRed HatISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or...5.9 MediumbindRed Hatnamed in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to...8.6 HighbindRed Hatnamed in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME...6.8 MediumbindRed Hatapl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote...6.5 MediumbindRed Hatdb.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers...5.0 MediumbindRed Hatbuffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote...7.8 HighbindRed Hatnamed in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to...7.8 HighbindRed Hatname.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when...7.8 HighbindRed Hatnamed in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC...5.4 MediumbindRed HatISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit...7.8 HighbindRed HatThe query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8...2.6 Low- Show moreLoading…