https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:11:29 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-00125 bdu:2021-00125 https://cve.radiocsirt.org/vuln/bdu:2021-00125 https://cve.radiocsirt.org/vuln/bell-cve-2020-8617 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2020-8617 https://cve.radiocsirt.org/vuln/certfr-2020-avi-302 certfr-2020-avi-302 https://cve.radiocsirt.org/vuln/certfr-2020-avi-302 https://cve.radiocsirt.org/vuln/cnvd-2020-29429 cnvd-2020-29429 https://cve.radiocsirt.org/vuln/cnvd-2020-29429 https://cve.radiocsirt.org/vuln/euvd-2026-171769 EUVD-2026-171769 https://cve.radiocsirt.org/vuln/euvd-2026-171769 https://cve.radiocsirt.org/vuln/fkie_cve-2020-8617 <p>Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration does not otherwise make use of it, almost all current BIND servers are vulnerable. In releases of BIND dating from March 2018 and after, an assertion check in tsig.c detects this inconsistent state and deliberately exits. Prior to the introduction of the check the server would continue operating in an inconsistent state, with potentially harmful results.</p> <p>Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration does not otherwise make use of it, almost all current BIND servers are vulnerable. In releases of BIND dating from March 2018 and after, an assertion check in tsig.c detects this inconsistent state and deliberately exits. Prior to the introduction of the check the server would continue operating in an inconsistent state, with potentially harmful results.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-8617 https://cve.radiocsirt.org/vuln/ghsa-q6g5-8p95-hqh7 <p>Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration does not otherwise make use of it, almost all current BIND servers are vulnerable. In releases of BIND dating from March 2018 and after, an assertion check in tsig.c detects this inconsistent state and deliberately exits. Prior to the introduction of the check the server would continue operating in an inconsistent state, with potentially harmful results.</p> <p>Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration does not otherwise make use of it, almost all current BIND servers are vulnerable. In releases of BIND dating from March 2018 and after, an assertion check in tsig.c detects this inconsistent state and deliberately exits. Prior to the introduction of the check the server would continue operating in an inconsistent state, with potentially harmful results.</p> https://cve.radiocsirt.org/vuln/ghsa-q6g5-8p95-hqh7 https://cve.radiocsirt.org/vuln/gsd-2020-8617 gsd-2020-8617 https://cve.radiocsirt.org/vuln/gsd-2020-8617 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1699-1 <p>Security update for bind</p> <p>Security update for bind</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:1699-1 https://cve.radiocsirt.org/vuln/rhsa-2020:2345 <p>bind: BIND does not sufficiently limit the number of fetches performed when processing referrals bind: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c</p> <p>bind: BIND does not sufficiently limit the number of fetches performed when processing referrals bind: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c</p> https://cve.radiocsirt.org/vuln/rhsa-2020:2345 https://cve.radiocsirt.org/vuln/suse-su-2020:1350-1 <p>Security update for bind</p> <p>Security update for bind</p> https://cve.radiocsirt.org/vuln/suse-su-2020:1350-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-8617 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: bind9, Ubuntu:16.04:LTS: bind9, Ubuntu:18.04:LTS: bind9, Ubuntu:20.04:LTS: bind9</p> <p>Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration does not otherwise make use of it, almost all current BIND servers are vulnerable. In releases of BIND dating from March 2018 and after, an assertion check in tsig.c detects this inconsistent state and deliberately exits. Prior to the introduction of the check the server would continue operating in an inconsistent state, with potentially harmful results.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: bind9, Ubuntu:16.04:LTS: bind9, Ubuntu:18.04:LTS: bind9, Ubuntu:20.04:LTS: bind9</p> <p>Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration does not otherwise make use of it, almost all current BIND servers are vulnerable. In releases of BIND dating from March 2018 and after, an assertion check in tsig.c detects this inconsistent state and deliberately exits. Prior to the introduction of the check the server would continue operating in an inconsistent state, with potentially harmful results.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-8617 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1198 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um einen Denial of Service Angriff durchzuführen oder sonstige Auswirkungen zu verursachen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um einen Denial of Service Angriff durchzuführen oder sonstige Auswirkungen zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1198