Search for packages
| purl | pkg:deb/debian/bind9@0?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-113v-hjhz-mqa1 | bind: processing specially crafted responses in quick succession may lead to assertion failure |
CVE-2022-3488
|
| VCID-1b5w-gp85-qfhw | bind: flaw in nxredirect can cause assertion failure |
CVE-2019-6467
|
| VCID-29ng-3xgz-hbh5 | bind: Multiple transfers of a zone in quick succession can cause an assertion failure in rbtdb.c |
CVE-2018-5736
|
| VCID-2fs7-vy7z-mkb5 | bind: bind: Denial of Service via corrupt or malicious record |
CVE-2025-13878
|
| VCID-2r8j-u91u-p7gb | Multiple vulnerabilities have been found in BIND, the worst of which may allow remote Denial of Service. |
CVE-2012-3868
|
| VCID-3q3b-aefg-53db | bind: assertion failure during EDNS option processing |
CVE-2014-3859
|
| VCID-5duc-79fr-9ucf | bind: BIND: Denial of Service via authenticated TKEY queries |
CVE-2026-3119
|
| VCID-5pz4-bxq7-27gh | bind: Interaction between NSEC aggresive negative caching and the serve-stale feature can cause a denial of service |
CVE-2018-5737
|
| VCID-69p9-m1zr-tfc4 | Bind: Unitended availability of cache data. |
CVE-2010-0218
|
| VCID-6wr2-6cwv-fqfb | bind: an assertion failure may lead to DoS |
CVE-2023-4236
|
| VCID-78pe-7amf-vkgu | bind: BIND: Unauthorized access due to use-after-return vulnerability in DNS query handling |
CVE-2026-3591
|
| VCID-7be7-f2ha-r7h6 | libbind off-by-one buffer overflow |
CVE-2008-0122
|
| VCID-7fzd-b48t-9kb4 | bind: named can exit with an assertion failure if nxdomain-redirect is used. |
CVE-2019-6468
|
| VCID-7mbz-t9jk-juca | bind: A flaw in mirror zone validity checking can allow zone data to be spoofed |
CVE-2019-6475
|
| VCID-7n8z-mhbn-xudt | Multiple vulnerabilities have been found in BIND, the worst of which allows remote attackers to cause a Denial of Service condition. |
CVE-2016-9778
|
| VCID-a88r-72p7-p3bf | Multiple vulnerabilities have been discovered in ISC BIND, the worst of which could result in denial of service. |
CVE-2022-2906
|
| VCID-a8r3-wrvw-fyhm | bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load |
CVE-2024-12705
|
| VCID-acny-gm8c-pyam | bind: Crash from assertion error when debug log level is 10 and log entries meet buffer boundary |
CVE-2018-5742
|
| VCID-b3u2-wjzm-duhc | bind: When chasing DS records, a timed-out or artificially delayed fetch could cause 'named' to crash while resuming a DS lookup |
CVE-2022-0667
|
| VCID-b47j-67kw-4bgv | Unspecified vulnerability in ISC BIND 9.3.5-P2-W1, 9.4.2-P2-W1, and 9.5.0-P2-W1 on Windows allows remote attackers to cause a denial of service (UDP client handler termination) via unknown vectors. |
CVE-2008-4163
|
| VCID-cufc-v1hn-jbdn | bind: An error in QNAME minimization code can cause BIND to exit with an assertion failure |
CVE-2019-6476
|
| VCID-d76w-pkgv-1kdj | Unknown vulnerability in BIND 9.2.0 in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to cause a denial of service. |
CVE-2005-0364
|
| VCID-d9kh-wcwu-mbdg | Multiple vulnerabilities have been found in BIND, the worst of which could cause a Denial of Service condition. |
CVE-2016-2088
|
| VCID-gr3d-pzrc-uydb | rdataset.c in ISC BIND 9 Supported Preview Edition 9.9.8-S before 9.9.8-S5, when nxdomain-redirect is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via crafted flag values in a query. |
CVE-2016-1284
|
| VCID-h36g-3jnc-qqaq | Multiple vulnerabilities have been found in BIND, possibly resulting in Denial of Service. |
CVE-2013-3919
|
| VCID-k1pn-qp6q-x3ew | BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods. |
CVE-2002-2211
|
| VCID-k4qv-8ggs-afef | bind: assertion failure in DNSSEC validation |
CVE-2017-3139
|
| VCID-kbgt-7v61-1yg7 | BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed from the internal BIND database and later cause a null dereference. |
CVE-2002-1221
|
| VCID-mfgj-p39v-3kgg | A vulnerability in BIND could lead to a Denial of Service condition. |
CVE-2015-5986
|
| VCID-mm57-1mhd-vue9 | Incomplete verification of RSA and DSA certificates might lead to spoofed records authenticated using DNSSEC. |
CVE-2009-0265
|
| VCID-n1bd-y84g-77ae | bind: race condition when handling socket errors can lead to an assertion failure in resolver.c |
CVE-2015-8461
|
| VCID-nw9j-ggq9-uqaq | bind: DNS message with invalid TSIG causes an assertion failure |
CVE-2025-40775
|
| VCID-pgxv-tnvp-pkb7 | bind: an error in the EDNS Client Subnet (ECS) feature for recursive resolvers can cause BIND to exit with an assertion failure leading to DoS |
CVE-2019-6469
|
| VCID-pxq6-e945-wqen | bind9: Cleaning an ECS-enabled cache may cause excessive CPU load |
CVE-2023-5680
|
| VCID-pywd-4rnk-dfhw | Multiple vulnerabilities have been found in BIND, the worst of which could cause a Denial of Service condition. |
CVE-2015-8705
|
| VCID-qgwq-kcp2-jqep | bind: bind9: A flood of DNS messages over TCP may make the server unstable |
CVE-2024-0760
|
| VCID-qhg8-95mf-aufj | bind: Destroying a TLS session early causes assertion failure |
CVE-2022-1183
|
| VCID-qnzx-zj6k-tkhf | bind: /etc/rndc.key has 644 permissions by default |
CVE-2007-6283
|
| VCID-qu4k-agb9-rqc7 | Multiple vulnerabilities have been found in BIND, allowing remote attackers to cause a denial of service condition. |
CVE-2014-8680
|
| VCID-rgjg-zw6c-77ad | security flaw |
CVE-2002-0029
|
| VCID-rvqb-pvb9-w7ht | bind: BIND: Denial of Service via specially crafted domain query causing a memory leak |
CVE-2026-3104
|
| VCID-stfg-weu9-3kag | A `named` caching resolver that is configured to send ECS (EDNS Client Subnet) options may be vulnerable to a cache-poisoning attack. This issue affects BIND 9 versions 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.37-S1, and 9.20.9-S1 through 9.20.10-S1. |
CVE-2025-40776
|
| VCID-sy8n-7mhn-1be7 | BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subdomain that does not exist, with an OPT resource record with a large UDP payload size. |
CVE-2002-1220
|
| VCID-t4dn-73sn-57c1 | Multiple vulnerabilities have been found in BIND, the worst of which allows remote attackers to cause a Denial of Service condition. |
CVE-2017-3140
|
| VCID-tf4h-qdz8-fuau | bind: localnets ACL bypass caused by WinSock API bug |
CVE-2013-6230
|
| VCID-ubru-w77c-87dv | Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records (RR). |
CVE-2002-1219
|
| VCID-v3z3-e53d-mbcu | Multiple vulnerabilities have been found in BIND, allowing remote attackers to cause a denial of service condition. |
CVE-2014-3214
|
| VCID-w7hs-jqc1-qqa9 | bind: A malformed request can trigger an assertion failure in badcache.c |
CVE-2018-5734
|
| VCID-wcf1-sy8g-27dw | bind: DNSSEC-Validated cache can be remotely terminated with malformed NSEC record |
CVE-2023-2829
|
| VCID-wpmu-g3xw-u7cs | Multiple vulnerabilities have been found in BIND, the worst of which allows remote attackers to cause a Denial of Service condition. |
CVE-2017-3141
|
| VCID-x4bu-4ex7-37cd | bind: Lookups involving a DNAME could trigger an assertion failure when 'synth-from-dnssec' was enabled (which is the default) |
CVE-2022-0635
|
| VCID-x9g2-pnfe-qyhh | bind: Too strict assertion check could be triggered when responses require UDP fragmentation if RRL is in use |
CVE-2021-25218
|