Debian Bind9 vulnerabilities

CVE-2007-0494 [MEDIUM] CVE-2007-0494: bind9 - ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0... ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (exit) via a type * (ANY) DNS query response that contains multiple RRsets, which triggers an assertion error, aka the "DNSSEC Validation" vulnerability. Scope: local boo

CVE-2019-6465 [MEDIUM] CVE-2019-6465: bind9 - Controls for zone transfers may not be properly applied to Dynamically Loadable ... Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P2, 9.12.0 -> 9.12.3-P2, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -> 9.13.6 of the 9.13 development branch are also affected. Versions prior to

CVE-2007-2925 [MEDIUM] CVE-2007-2925: bind9 - The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 thr... The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows remote attackers to make recursive queries and query the cache. Scope: local bookworm: resolved (fixed in 1:9.4.1-P1-1) bullseye: resolved (fixed in 1:9.4.1-P1-1) forky: resolved (fixed in 1:9.4.1-P1-1) si

CVE-2019-6471 [MEDIUM] CVE-2019-6471: bind9 - A race condition which may occur when discarding malformed packets can result in... A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition v

CVE-2012-1033 [MEDIUM] CVE-2012-1033: bind9 - The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and T... The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack. Scope: local bookworm: resolved (fixed in 1:9.8.1.dfsg.P1-4.1) bullseye: resolved (f

CVE-2011-4313 [MEDIUM] CVE-2011-4313: bind9 - query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV thr... query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the re

CVE-2010-0097 [MEDIUM] CVE-2010-0097: bind9 - ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 befo... ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC (1) NSEC and (2) NSEC3 records, which allows remote attackers to add the Authenticated Data (AD) flag to a forged NXDOMAIN response for an existing domain. Scope: local bookworm: resolved (fixed in 1:9.7.0.dfsg-1) bullseye: reso

CVE-2010-3615 [MEDIUM] CVE-2010-3615: bind9 - named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query... named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via the standard DNS query mechanism. Scope: local bookworm: resolved (fixed in 1:9.7.2.dfsg.P3-1) bullseye: resolved (fixed in 1:9.7.2.dfsg.P3-1) forky: resolved (fixed in 1:9.7.2.dfsg.P3-1) sid:

CVE-2022-0396 [MEDIUM] CVE-2022-0396: bind9 - BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 ... BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection. Scope: local bookworm: resolved (fixed in 1:9.18.1-1) bullseye: resolv

CVE-2022-2795 [MEDIUM] CVE-2022-2795: bind9 - By flooding the target resolver with queries exploiting this flaw an attacker ca... By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service. Scope: local bookworm: resolved (fixed in 1:9.18.7-1) bullseye: resolved (fixed in 1:9.16.33-1~deb11u1) forky: resolved (fixed in 1:9.18.7-1) sid: resolved (fixed

CVE-2014-0591 [LOW] CVE-2014-0591: bind9 - The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, an... The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature. Scope: local bookworm:

CVE-2007-2241 [HIGH] CVE-2007-2241: bind9 - Unspecified vulnerability in query.c in ISC BIND 9.4.0, and 9.5.0a1 through 9.5.... Unspecified vulnerability in query.c in ISC BIND 9.4.0, and 9.5.0a1 through 9.5.0a3, when recursion is enabled, allows remote attackers to cause a denial of service (daemon exit) via a sequence of queries processed by the query_addsoa function. Scope: local bookworm: resolved (fixed in 1:9.4.1-1) bullseye: resolved (fixed in 1:9.4.1-1) forky: resolved (fixed in 1:9.4.1-

CVE-2020-8624 [MEDIUM] CVE-2020-8624: bind9 - In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5,... In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a specific subset of the zone's content could abuse these unintended additional privileges to update other contents

CVE-2018-5745 [MEDIUM] CVE-2018-5745: bind9 - "managed-keys" is a feature which allows a BIND resolver to automatically mainta... "managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses managed-keys to exit due to an assertion failure if, during key rollover, a trust anchor's keys are replaced wit

CVE-2020-8619 [MEDIUM] CVE-2020-8619: bind9 - In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16... In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1: Unless a nameserver is providing authoritative service for one or more zones and at least one zone contains an empty non-terminal entry containing an asterisk ("*") character, this defect cannot be encountered. A would-

CVE-2020-8618 [MEDIUM] CVE-2020-8618: bind9 - An attacker who is permitted to send zone data to a server via zone transfer can... An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone, denying service to clients. Scope: local bookworm: resolved (fixed in 1:9.16.4-1) bullseye: resolved (fixed in 1:9.16.4-1) forky: resolved (fixed in 1:9.16.4-1) sid: resolved (fixed in 1:9.16.4-

CVE-2017-3142 [MEDIUM] CVE-2017-3142: bind9 - An attacker who is able to send and receive messages to an authoritative DNS ser... An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies solely on TSIG keys for protection with no other ACL protection could be manipulated into: providing an AXFR of

CVE-2006-4096 [MEDIUM] CVE-2006-4096: bind9 - BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause ... BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty. Scope: local bookworm: resolved (fixed in 1:9.3.2-P1-1) bullseye: resolved (fixed in 1:9.3.2-P1-1) forky: resolved (fixed in 1:9.3.2

CVE-2010-0290 [LOW] CVE-2010-0290: bind9 - Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, ... Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains (1) CNAME or (2) DNAME records, which

CVE-2010-3613 [MEDIUM] CVE-2010-3613: bind9 - named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x be... named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service (daemon crash) via a query for cached data. Scope: local bookworm: resolved (fixed in 1:9.7.2.dfsg.P3