Search CVE reports
11 – 20 of 91 results
(If an attacker-controlled authoritative server can produce a negative ...)
3 affected packages
bind9, isc-dhcp, bind9-libs
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| bind9 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| isc-dhcp | Needs evaluation | Needs evaluation | Not affected | Not affected | Needs evaluation |
| bind9-libs | Not in release | Not in release | Needs evaluation | Needs evaluation | — |
(On a resolver configured to use ``dns64``, if an applicable answer fro ...)
3 affected packages
bind9, isc-dhcp, bind9-libs
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| bind9 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| isc-dhcp | Needs evaluation | Needs evaluation | Not affected | Not affected | Needs evaluation |
| bind9-libs | Not in release | Not in release | Needs evaluation | Needs evaluation | — |
(An attacker may be able to cause a `named` resolver to abort. The atta ...)
3 affected packages
bind9, isc-dhcp, bind9-libs
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| bind9 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| isc-dhcp | Needs evaluation | Needs evaluation | Not affected | Not affected | Needs evaluation |
| bind9-libs | Not in release | Not in release | Needs evaluation | Needs evaluation | — |
(For a secondary zone with transfers restricted by TSIG, `named` may st ...)
3 affected packages
bind9, isc-dhcp, bind9-libs
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| bind9 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| isc-dhcp | Needs evaluation | Needs evaluation | Not affected | Not affected | Needs evaluation |
| bind9-libs | Not in release | Not in release | Needs evaluation | Needs evaluation | — |
A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI (Open Management Application Programming Interface) port, especially if not secured with TSIG (Transaction Signature) key authentication, could...
1 affected package
isc-dhcp
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| isc-dhcp | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
Some fixes available 3 of 12
The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23,...
3 affected packages
bind9, isc-dhcp, bind9-libs
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| bind9 | Fixed | Fixed | Fixed | Needs evaluation | Needs evaluation |
| isc-dhcp | Needs evaluation | Needs evaluation | Not affected | Not affected | Needs evaluation |
| bind9-libs | Not in release | Not in release | Needs evaluation | Needs evaluation | — |
Some fixes available 3 of 12
If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof. This...
3 affected packages
bind9, isc-dhcp, bind9-libs
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| bind9 | Fixed | Fixed | Fixed | Needs evaluation | Needs evaluation |
| isc-dhcp | Needs evaluation | Needs evaluation | Not affected | Not affected | Needs evaluation |
| bind9-libs | Not in release | Not in release | Needs evaluation | Needs evaluation | — |
Some fixes available 3 of 12
The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the...
3 affected packages
bind9, isc-dhcp, bind9-libs
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| bind9 | Fixed | Fixed | Fixed | Needs evaluation | Needs evaluation |
| isc-dhcp | Needs evaluation | Needs evaluation | Not affected | Not affected | Needs evaluation |
| bind9-libs | Not in release | Not in release | Needs evaluation | Needs evaluation | — |
Some fixes available 3 of 12
It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes `named` to produce a wildcard name for a zone that is shorter...
3 affected packages
bind9, isc-dhcp, bind9-libs
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| bind9 | Fixed | Fixed | Fixed | Needs evaluation | Needs evaluation |
| isc-dhcp | Needs evaluation | Needs evaluation | Not affected | Not affected | Needs evaluation |
| bind9-libs | Not in release | Not in release | Needs evaluation | Needs evaluation | — |
Some fixes available 3 of 12
A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation....
3 affected packages
bind9, isc-dhcp, bind9-libs
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| bind9 | Fixed | Fixed | Fixed | Needs evaluation | Needs evaluation |
| isc-dhcp | Needs evaluation | Needs evaluation | Not affected | Not affected | Needs evaluation |
| bind9-libs | Not in release | Not in release | Needs evaluation | Needs evaluation | — |