https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:44:47.003420+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:1670 ALSA-2025:1670 — Important: bind9.18 security update 2026-10-03T01:44:47.248771+00:00

Affected: AlmaLinux:9: bind9.18, AlmaLinux:9: bind9.18-chroot, AlmaLinux:9: bind9.18-devel, AlmaLinux:9: bind9.18-dnssec-utils, AlmaLinux:9: bind9.18-doc, AlmaLinux:9: bind9.18-libs, AlmaLinux:9: bind9.18-utils

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

* bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187) * bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load (CVE-2024-12705)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-07734 bdu:2025-07734 2026-10-03T01:44:47.248902+00:00 bdu:2025-07734 https://cve.radiocsirt.org/vuln/bell-cve-2024-12705 BELL-CVE-2024-12705 2026-10-03T01:44:47.248928+00:00

Affected: Alpaquita:23: bind, Alpaquita:stream: bind

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0081 certfr-2025-avi-0081 — De multiples vulnérabilités ont été découvertes dans ISC BIND. Elles permettent à un attaquant de provoquer un déni de… 2026-10-03T01:44:47.248968+00:00 certfr-2025-avi-0081 https://cve.radiocsirt.org/vuln/euvd-2026-214250 EUVD-2026-214250 2026-10-03T01:44:47.248994+00:00 EUVD-2026-214250 https://cve.radiocsirt.org/vuln/fkie_cve-2024-12705 fkie_cve-2024-12705 2026-10-03T01:44:47.249013+00:00

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.

 https://cve.radiocsirt.org/vuln/ghsa-gf34-2fpp-vmc4 GHSA-gf34-2fpp-vmc4 2026-10-03T01:44:47.249051+00:00

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.

 https://cve.radiocsirt.org/vuln/msrc_cve-2024-12705 msrc_CVE-2024-12705 — DNS-over-HTTPS implementation suffers from multiple issues under heavy query load 2026-10-03T01:44:47.249079+00:00 msrc_CVE-2024-12705 https://cve.radiocsirt.org/vuln/oesa-2025-1105 OESA-2025-1105 — bind security update 2026-10-03T01:44:47.249105+00:00

Affected: openEuler:24.03-LTS: bind

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es):

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.(CVE-2024-11187)

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.(CVE-2024-12705)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14719-1 openSUSE-SU-2025:14719-1 — bind-9.20.5-1.1 on GA media 2026-10-03T01:44:47.249167+00:00

bind-9.20.5-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:1670 RHSA-2025:1670 — Red Hat Security Advisory: bind9.18 security update 2026-10-03T01:44:47.249195+00:00

bind: bind9: Many records in the additional section cause CPU exhaustion bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load

 https://cve.radiocsirt.org/vuln/suse-su-2025:0355-1 SUSE-SU-2025:0355-1 — Security update for bind 2026-10-03T01:44:47.249248+00:00

Security update for bind

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-12705 UBUNTU-CVE-2024-12705 2026-10-03T01:44:47.249289+00:00

Affected: Ubuntu:18.04:LTS: isc-dhcp, Ubuntu:20.04:LTS: bind9, Ubuntu:20.04:LTS: bind9-libs, Ubuntu:22.04:LTS: bind9, Ubuntu:22.04:LTS: bind9-libs, Ubuntu:24.04:LTS: bind9, Ubuntu:24.04:LTS: isc-dhcp, Ubuntu:25.10: isc-dhcp, Ubuntu:26.04:LTS: isc-dhcp

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.

 https://cve.radiocsirt.org/vuln/vde-2025-053 VDE-2025-053 — Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware 2026-10-03T01:44:47.249339+00:00

Coreutils: heap overflow in split --line-bytes with very long lines Unprivileged overlay + shiftfs read access Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file SSL_select_next_proto buffer overread Remote Code Execution in pypa/setuptools

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0217 WID-SEC-W-2025-0217 — Internet Systems Consortium BIND: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-03T01:44:47.249400+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um einen Denial of Service Angriff durchzuführen.