Isc Bind9 vulnerabilities

• debian linux, fedoraproject fedora, isc bind +2 more +4 more Memory leaks in EdDSA DNSSEC verification code CVE-2022-38178 Fix available 7.5 HighSeptember 21, 2022
• debian linux, fedoraproject fedora, isc bind +2 more +4 more Memory leak in ECDSA DNSSEC verification code CVE-2022-38177 Fix available 7.5 HighSeptember 21, 2022
• isc bind, fedoraproject fedora, isc bind9 +2 more BIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedly CVE-2022-3080 Fix available 7.5 HighSeptember 21, 2022
• isc bind, bind9 +1 more Memory leaks in code handling Diffie-Hellman key exchange via TKEY RRs (OpenSSL 3.0.0+ only) CVE-2022-2906 Fix available 7.5 HighSeptember 21, 2022
• isc bind, bind9 +1 more Buffer overread in statistics channel code CVE-2022-2881 Fix available 5.5 MediumSeptember 21, 2022
• debian linux, fedoraproject fedora, isc bind +1 more +3 more Processing large delegations may severely degrade resolver performance CVE-2022-2795 Fix available 5.3 MediumSeptember 21, 2022
• isc bind, bind9, netapp h300s firmware +4 more +6 more Destroying a TLS session early causes assertion failure CVE-2022-1183 Fix available 7.5 HighMay 18, 2022
• isc bind, debian linux, fedoraproject fedora +13 more +15 more Lame cache can be abused to severely degrade resolver performance CVE-2021-25219 Fix available EPSS 11.2% 5.3 MediumOctober 27, 2021
• isc bind, fedoraproject fedora, isc bind9 +2 more A too-strict assertion check could be triggered when responses in BIND 9.16.19 and 9.17.16 require UDP fragmentation if RRL is in use CVE-2021-25218 Fix available 7.5 HighAugust 18, 2021
• isc bind, debian linux, isc bind9 +12 more +14 more A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack CVE-2021-25216 Fix available EPSS 83.0% 8.1 HighApril 28, 2021
• isc bind, debian linux, fedoraproject fedora +14 more +16 more An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself CVE-2021-25215 Fix available EPSS 11.7% 7.5 HighApril 28, 2021
• isc bind, debian linux, fedoraproject fedora +13 more +15 more A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly CVE-2021-25214 Fix available 6.5 MediumApril 28, 2021
• isc bind, debian linux, fedoraproject fedora +5 more +7 more A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack CVE-2020-8625 Fix available EPSS 64.2% 8.1 HighFebruary 17, 2021
• isc bind, canonical ubuntu linux, debian linux +4 more +6 more update-policy rules of type "subdomain" are enforced incorrectly CVE-2020-8624 Fix available 4.3 MediumAugust 20, 2020
• isc bind, canonical ubuntu linux, debian linux +5 more +7 more A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c CVE-2020-8623 Fix available 7.5 HighAugust 20, 2020
• isc bind, canonical ubuntu linux, debian linux +6 more +8 more A truncated TSIG response can lead to an assertion failure CVE-2020-8622 Fix available 6.5 MediumAugust 20, 2020
• isc bind, canonical ubuntu linux, isc bind9 +3 more +5 more Attempting QNAME minimization after forwarding can lead to an assertion failure in resolver.c CVE-2020-8621 Fix available 7.5 HighAugust 20, 2020
• isc bind, canonical ubuntu linux, isc bind9 +2 more +4 more In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with... CVE-2020-8620 Fix available 7.5 HighAugust 20, 2020
• isc bind, bind9, canonical ubuntu linux +4 more +6 more A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer CVE-2020-8619 Fix available 4.9 MediumJune 17, 2020
• canonical ubuntu linux, isc bind, bind9 +2 more +4 more A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer CVE-2020-8618 Fix available 4.9 MediumJune 17, 2020
• isc bind, canonical ubuntu linux, debian linux +3 more +5 more A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c CVE-2020-8617 Public exploitFix available EPSS 93.3% 7.5 HighMay 19, 2020
• isc bind, debian linux, isc bind9 +2 more BIND does not sufficiently limit the number of fetches performed when processing referrals CVE-2020-8616 Fix available EPSS 10.9% 8.6 HighMay 19, 2020
• fedoraproject fedora, isc bind, bind9 +2 more TCP-pipelined queries can bypass tcp-clients limit CVE-2019-6477 Fix available 7.5 HighNovember 20, 2019
• isc bind, bind9 +1 more An oversight while backporting a feature leads to an assertion failure in buffer.c:420 CVE-2018-5742 Fix available 5.9 MediumOctober 30, 2019
• debian bind9, linux +1 more Backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858 CVE-2018-5735 Fix available 7.5 HighFebruary 16, 2018