VYPR

bind

by Red Hat

CVEs (2)

  • CVE-2018-5742HigOct 30, 2019
    risk 0.49cvss 7.5epss 0.02

    While backporting a feature for a newer branch of BIND9, RedHat introduced a path leading to an assertion failure in buffer.c:420. Affects RedHat versions bind-9.9.4-65.el7 -> bind-9.9.4-72.el7. No ISC releases are affected. Other packages from other distributions who made the…

  • CVE-2017-3139HigApr 9, 2019
    risk 0.49cvss 7.5epss 0.02

    A denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response.