Search for packages
| purl | pkg:deb/debian/bind9@1:9.16.50-1~deb11u2 |
| Next non-vulnerable version | 1:9.18.47-1~deb12u1 |
| Latest non-vulnerable version | 1:9.18.47-1~deb12u1 |
| Risk | 3.9 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2s8x-my3p-c7bd
Aliases: CVE-2025-40780 |
bind: Cache poisoning due to weak PRNG |
Affected by 1 other vulnerability. |
|
VCID-7swx-af28-yqaw
Aliases: CVE-2025-40778 |
bind: Cache poisoning attacks with unsolicited RRs |
Affected by 1 other vulnerability. |
|
VCID-auju-9h98-xkd1
Aliases: CVE-2025-8677 |
bind: Resource exhaustion via malformed DNSKEY handling |
Affected by 1 other vulnerability. |
|
VCID-d9np-47r3-rkg1
Aliases: CVE-2025-40777 |
bind: bind assertion failure |
Affected by 0 other vulnerabilities. |
|
VCID-gdhz-6yzf-afda
Aliases: CVE-2022-2881 |
Multiple vulnerabilities have been discovered in ISC BIND, the worst of which could result in denial of service. |
Affected by 1 other vulnerability. |
|
VCID-unqt-mcxv-c7fw
Aliases: CVE-2026-1519 |
bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone |
Affected by 1 other vulnerability. |
|
VCID-xz18-c263-nyap
Aliases: CVE-2024-11187 |
bind: bind9: Many records in the additional section cause CPU exhaustion |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-3aue-fwnn-qkhu | bind: named's configured cache size limit can be significantly exceeded |
CVE-2023-2828
|
| VCID-3dmq-y6bw-83cx | bind: Exceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0 |
CVE-2023-2911
|
| VCID-43p8-gtsg-f7ck | bind9: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution |
CVE-2023-5679
|
| VCID-4nrz-wm5t-z3g5 | bind: Buffer overflow in the SPNEGO implementation affecting GSSAPI security policy negotiation |
CVE-2020-8625
|
| VCID-5bun-yx8z-qka6 | Multiple vulnerabilities have been found in BIND, the worst of which could result in a Denial of Service condition. |
CVE-2020-8620
|
| VCID-5mjw-b7k7-h7er | Multiple vulnerabilities have been found in BIND, the worst of which could result in a Denial of Service condition. |
CVE-2020-8621
|
| VCID-5yaa-23ds-bbby | Multiple vulnerabilities have been discovered in ISC BIND, the worst of which could result in denial of service. |
CVE-2022-38177
|
| VCID-66sa-bc5p-jqde | Multiple vulnerabilities have been discovered in Dnsmasq, the worst of which could lead to a denial of service. |
CVE-2023-50387
|
| VCID-67zf-a3r9-wqcv | Multiple vulnerabilities have been discovered in ISC BIND, the worst of which could result in denial of service. |
CVE-2021-25220
|
| VCID-6guk-trum-3bad | Multiple vulnerabilities have been found in BIND, the worst of which could result in a Denial of Service condition. |
CVE-2020-8622
|
| VCID-7kh5-ba54-z3gy | bind: An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself |
CVE-2021-25215
|
| VCID-8k3p-761z-f3e3 | Multiple vulnerabilities have been discovered in ISC BIND, the worst of which could result in denial of service. |
CVE-2021-25219
|
| VCID-9wd4-6az1-j7fp | bind9: Parsing large DNS messages may cause excessive CPU load |
CVE-2023-4408
|
| VCID-ak5q-p7gh-qbdj | bind: stack exhaustion in control channel code may lead to DoS |
CVE-2023-3341
|
| VCID-b4tb-tn9e-f3gk | bind9: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled |
CVE-2023-5517
|
| VCID-e5ez-2bba-zke3 | security update |
CVE-2020-8617
|
| VCID-emc6-37uv-xub8 | Multiple vulnerabilities have been found in BIND, the worst of which could result in a Denial of Service condition. |
CVE-2020-8623
|
| VCID-gqmy-rkkq-mkgj | bind: A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer |
CVE-2020-8618
|
| VCID-hb26-udtw-6uhy | Multiple vulnerabilities have been discovered in ISC BIND, the worst of which could result in denial of service. |
CVE-2022-38178
|
| VCID-jh5e-m42g-4bb3 | bind: bind9: Assertion failure when serving both stale cache data and authoritative zone content |
CVE-2024-4076
|
| VCID-jp5u-p7cf-43dw | bind: flooding with UPDATE requests may lead to DoS |
CVE-2022-3094
|
| VCID-kpsw-dq9w-pkdr | Multiple vulnerabilities have been discovered in ISC BIND, the worst of which could result in denial of service. |
CVE-2022-2795
|
| VCID-nfr5-81bf-fuc5 | bind9: Specific recursive query patterns may lead to an out-of-memory condition |
CVE-2023-6516
|
| VCID-pjk7-r6yh-ufak | bind: Broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly |
CVE-2021-25214
|
| VCID-qk77-35nr-1qbd | bind: TCP Pipelining doesn't limit TCP clients on a single connection |
CVE-2019-6477
|
| VCID-qknq-wu95-6ba7 | bind: asterisk character in an empty non-terminal can cause an assertion failure in rbtdb.c |
CVE-2020-8619
|
| VCID-rd8n-tcus-zyg3 | bind: Vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack |
CVE-2021-25216
|
| VCID-rgz6-urkq-ybch | Multiple vulnerabilities have been discovered in ISC BIND, the worst of which could result in denial of service. |
CVE-2022-3080
|
| VCID-tg21-xnsh-t7c3 | security update |
CVE-2020-8616
|
| VCID-ue3u-3a17-8uej | bind9: bind: SIG(0) can be used to exhaust CPU resources |
CVE-2024-1975
|
| VCID-vc7v-cqr1-jkcd | bind: sending specific queries to the resolver may cause a DoS |
CVE-2022-3924
|
| VCID-vprj-j7u6-zbe7 | Multiple vulnerabilities have been discovered in Dnsmasq, the worst of which could lead to a denial of service. |
CVE-2023-50868
|
| VCID-xprr-w4d5-m7dt | bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam |
CVE-2024-1737
|
| VCID-yeqv-d2wz-6ybd | Multiple vulnerabilities have been found in BIND, the worst of which could result in a Denial of Service condition. |
CVE-2020-8624
|
| VCID-z9gk-jg1m-gfg6 | bind: sending specific queries to the resolver may cause a DoS |
CVE-2022-3736
|
| VCID-zgnn-ckqt-43fq | Multiple vulnerabilities have been discovered in ISC BIND, the worst of which could result in denial of service. |
CVE-2022-0396
|