https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:48:43.964103+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:2261 ALSA-2023:2261 — Moderate: bind security and bug fix update 2026-10-03T07:48:44.201279+00:00

Affected: AlmaLinux:9: bind, AlmaLinux:9: bind-chroot, AlmaLinux:9: bind-devel, AlmaLinux:9: bind-dnssec-doc, AlmaLinux:9: bind-dnssec-utils, AlmaLinux:9: bind-doc, AlmaLinux:9: bind-libs, AlmaLinux:9: bind-license, AlmaLinux:9: bind-utils, AlmaLinux:9: python3-bind

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: processing large delegations may severely degrade resolver performance (CVE-2022-2795) * bind: flooding with UPDATE requests may lead to DoS (CVE-2022-3094) * bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3736) * bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3924)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-07832 bdu:2023-07832 2026-10-03T07:48:44.201352+00:00 bdu:2023-07832 https://cve.radiocsirt.org/vuln/bell-cve-2022-3736 Withdrawn: BELL-CVE-2022-3736 — CVE-2022-3736 does not affect BellSoft software 2026-10-03T07:48:44.201370+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2023-avi-0059 certfr-2023-avi-0059 — De multiples vulnérabilités ont été découvertes dans ISC Bind. Elles permettent à un attaquant de provoquer un déni de… 2026-10-03T07:48:44.201384+00:00 certfr-2023-avi-0059 https://cve.radiocsirt.org/vuln/euvd-2026-226430 EUVD-2026-226430 2026-10-03T07:48:44.201398+00:00 EUVD-2026-226430 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3736 fkie_cve-2022-3736 2026-10-03T07:48:44.201408+00:00

BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9.18.10, 9.19.0 through 9.19.8, and 9.16.12-S1 through 9.16.36-S1.

 https://cve.radiocsirt.org/vuln/ghsa-5v6f-5gpq-2628 GHSA-5v6f-5gpq-2628 2026-10-03T07:48:44.201429+00:00

BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9.18.10, 9.19.0 through 9.19.8, and 9.16.12-S1 through 9.16.36-S1.

 https://cve.radiocsirt.org/vuln/gsd-2022-3736 gsd-2022-3736 2026-10-03T07:48:44.201443+00:00 gsd-2022-3736 https://cve.radiocsirt.org/vuln/msrc_cve-2022-3736 msrc_CVE-2022-3736 — named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries 2026-10-03T07:48:44.201453+00:00 msrc_CVE-2022-3736 https://cve.radiocsirt.org/vuln/oesa-2023-1067 OESA-2023-1067 — bind security update 2026-10-03T07:48:44.201468+00:00

Affected: openEuler:22.03-LTS: bind

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es): Sending a flood of dynamic DNS updates may cause `named` to allocate large amounts of memory. This, in turn, may cause `named` to exit due to a lack of free memory. We are not aware of any cases where this has been exploited. Memory is allocated prior to the checking of access permissions (ACLs) and is retained during the processing of a dynamic update from a client whose access credentials are accepted. Memory allocated to clients that are not permitted to send updates is released immediately upon rejection. The scope of this vulnerability is limited therefore to trusted clients who are permitted to make dynamic zone changes. If a dynamic update is REFUSED, memory will be released again very quickly. Therefore it is only likely to be possible to degrade or stop `named` by sending a flood of unaccepted dynamic updates comparable in magnitude to a query flood intended to achieve the same detrimental outcome. BIND 9.11 and earlier branches are also affected, but through exhaustion of internal resources rather than memory constraints. This may reduce performance but should not be a significant problem for most servers. Therefore we…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12641-1 openSUSE-SU-2024:12641-1 — bind-9.18.11-1.1 on GA media 2026-10-03T07:48:44.201503+00:00

bind-9.18.11-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-3736 UBUNTU-CVE-2022-3736 2026-10-03T07:48:44.201520+00:00

Affected: Ubuntu:22.04:LTS: bind9

BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9.18.10, 9.19.0 through 9.19.8, and 9.16.12-S1 through 9.16.36-S1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0207 WID-SEC-W-2023-0207 — Internet Systems Consortium BIND: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-03T07:48:44.201538+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um einen Denial of Service Angriff durchzuführen.