https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T17:38:54.785658+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-2911 CVE-2023-2911 — Exceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set… 2026-10-14T17:38:54.821597+00:00

Affected: ISC BIND 9

If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-timeout 0;`, a sequence of serve-stale-related lookups could cause `named` to loop and terminate unexpectedly due to a stack overflow. This issue affects BIND 9 versions 9.16.33 through 9.16.41, 9.18.7 through 9.18.15, 9.16.33-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.

 https://cve.radiocsirt.org/vuln/usn-6183-1 USN-6183-1 — bind9 vulnerabilities 2026-10-14T17:38:54.821670+00:00

Affected: Ubuntu:20.04:LTS: bind9, Ubuntu:22.04:LTS: bind9

Shoham Danino, Anat Bremler-Barr, Yehuda Afek, and Yuval Shavitt discovered that Bind incorrectly handled the cache size limit. A remote attacker could possibly use this issue to consume memory, leading to a denial of service. (CVE-2023-2828)

It was discovered that Bind incorrectly handled the recursive-clients quota. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 22.10, and Ubuntu 23.04. (CVE-2023-2911)