Most recent entries from all

ALSA-2025:1670 — Important: bind9.18 security update

Affected: AlmaLinux:9: bind9.18, AlmaLinux:9: bind9.18-chroot, AlmaLinux:9: bind9.18-devel, AlmaLinux:9: bind9.18-dnssec-utils, AlmaLinux:9: bind9.18-doc, AlmaLinux:9: bind9.18-libs, AlmaLinux:9: bind9.18-utils

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

* bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187) * bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load (CVE-2024-12705)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-07734

BELL-CVE-2024-12705

Affected: Alpaquita:23: bind, Alpaquita:stream: bind

certfr-2025-avi-0081 — De multiples vulnérabilités ont été découvertes dans ISC BIND. Elles permettent à un attaquant de provoquer un déni de…

certfr-2025-avi-0081

EUVD-2026-214250

fkie_cve-2024-12705

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.

GHSA-gf34-2fpp-vmc4

msrc_CVE-2024-12705 — DNS-over-HTTPS implementation suffers from multiple issues under heavy query load

msrc_CVE-2024-12705

OESA-2025-1105 — bind security update

Affected: openEuler:24.03-LTS: bind

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.(CVE-2024-11187)

openSUSE-SU-2025:14719-1 — bind-9.20.5-1.1 on GA media

bind-9.20.5-1.1 on GA media

RHSA-2025:1670 — Red Hat Security Advisory: bind9.18 security update

bind: bind9: Many records in the additional section cause CPU exhaustion bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load

SUSE-SU-2025:0355-1 — Security update for bind

Security update for bind

UBUNTU-CVE-2024-12705

Affected: Ubuntu:18.04:LTS: isc-dhcp, Ubuntu:20.04:LTS: bind9, Ubuntu:20.04:LTS: bind9-libs, Ubuntu:22.04:LTS: bind9, Ubuntu:22.04:LTS: bind9-libs, Ubuntu:24.04:LTS: bind9, Ubuntu:24.04:LTS: isc-dhcp, Ubuntu:25.10: isc-dhcp, Ubuntu:26.04:LTS: isc-dhcp

VDE-2025-053 — Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware

Coreutils: heap overflow in split --line-bytes with very long lines Unprivileged overlay + shiftfs read access Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file SSL_select_next_proto buffer overread Remote Code Execution in pypa/setuptools

WID-SEC-W-2025-0217 — Internet Systems Consortium BIND: Mehrere Schwachstellen ermöglichen Denial of Service

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um einen Denial of Service Angriff durchzuführen.