opensuse/bind&distro=openSUSE Tumbleweed

Vulnerabilities (115)

• CVE-2022-1183May 19, 2022
  affected < 9.18.3-1.1fixed 9.18.3-1.1

  On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerable configurations are those that include a reference to http within the listen-on statements in their named.conf. TLS is used by both DNS over TLS (DoT) and DNS

• CVE-2021-25220Mar 23, 2022
  affected < 9.18.2-1.1fixed 9.18.2-1.1

  BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have

• CVE-2022-0635Mar 23, 2022
  affected < 9.18.2-1.1fixed 9.18.2-1.1

  Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually terminate due to a failed assertion check.

• CVE-2022-0396Mar 23, 2022
  affected < 9.18.2-1.1fixed 9.18.2-1.1

  BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has termina

• CVE-2022-0667Mar 22, 2022
  affected < 9.18.2-1.1fixed 9.18.2-1.1

  When the vulnerability is triggered the BIND process will exit. BIND 9.18.0

• CVE-2021-25219Oct 27, 2021
  affected < 9.16.20-3.1fixed 9.16.20-3.1

  In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a

• CVE-2021-25218Aug 18, 2021
  affected < 9.16.20-1.4fixed 9.16.20-1.4

  In BIND 9.16.19, 9.17.16. Also, version 9.16.19-S1 of BIND Supported Preview Edition When a vulnerable version of named receives a query under the circumstances described above, the named process will terminate due to a failed assertion check. The vulnerability affects only BIND

• CVE-2021-25216Apr 29, 2021
  affected < 9.16.20-1.4fixed 9.16.20-1.4

  In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.1 of the BIND 9.17 development branch, BIND servers are vulnerable if they are running

• CVE-2021-25215Apr 29, 2021
  affected < 9.16.20-1.4fixed 9.16.20-1.4

  In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a qu

• CVE-2021-25214Apr 29, 2021
  affected < 9.16.20-1.4fixed 9.16.20-1.4

  In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of n

• CVE-2020-8625Feb 17, 2021
  affected < 9.16.20-1.4fixed 9.16.20-1.4

  BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's default settings the vulnerable code path is not exposed, but a server can be rendered vulnerable by explicitly setting valid valu

• CVE-2020-8624Aug 21, 2020
  affected < 9.16.20-1.4fixed 9.16.20-1.4

  In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a specific subset of the

• CVE-2020-8623Aug 21, 2020
  affected < 9.16.20-1.4fixed 9.16.20-1.4

  In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query packet can trigger a crash. To be vulnerable, the system must

• CVE-2020-8622Aug 21, 2020
  affected < 9.16.20-1.4fixed 9.16.20-1.4

  In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the server receiving the TSIG-signed request, could send a truncated

• CVE-2020-8621Aug 21, 2020
  affected < 9.16.20-1.4fixed 9.16.20-1.4

  In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that 'forward only' are not affecte

• CVE-2020-8620Aug 21, 2020
  affected < 9.16.20-1.4fixed 9.16.20-1.4

  In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the assertion failure, causing the server to exit.

• CVE-2020-8619Jun 17, 2020
  affected < 9.16.20-1.4fixed 9.16.20-1.4

  In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1: Unless a nameserver is providing authoritative service for one or more zones and at least one zone contains an empty non-terminal

• CVE-2020-8618Jun 17, 2020
  affected < 9.16.20-1.4fixed 9.16.20-1.4

  An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone, denying service to clients.

• CVE-2020-8617May 19, 2020
  affected < 9.16.20-1.4fixed 9.16.20-1.4

  Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whos

• CVE-2020-8616May 19, 2020
  affected < 9.16.20-1.4fixed 9.16.20-1.4

  A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafted referrals, cause a recursing server to issue a very large number of fetches in an attempt to proce