agentprime: isc-bind-9

agentprime: isc-bind-9Every new CVE for isc-bind-9.https://agentprime.io/CVE-2026-97313: Specific RPZ configurations and query patterns may result in an unexpected exithttps://agentprime.io/advisories/CVE-2026-97313/https://agentprime.io/advisories/CVE-2026-97313/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:47:28 GMTCVECVE-2026-96888: Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimizationhttps://agentprime.io/advisories/CVE-2026-96888/https://agentprime.io/advisories/CVE-2026-96888/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:46:17 GMTCVECVE-2026-94300: Concurrent GSS-TSIG messages corrupt memoryhttps://agentprime.io/advisories/CVE-2026-94300/https://agentprime.io/advisories/CVE-2026-94300/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:45:26 GMTCVECVE-2026-19630: Amplified resource exhaustion in inbound message processinghttps://agentprime.io/advisories/CVE-2026-19630/https://agentprime.io/advisories/CVE-2026-19630/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:41:04 GMTCVECVE-2026-77119: NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsetshttps://agentprime.io/advisories/CVE-2026-77119/https://agentprime.io/advisories/CVE-2026-77119/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 14:17:11 GMTCVECVE-2026-75029: Message parser retains every identical singleton RDATA, enabling wire-to-work amplificationhttps://agentprime.io/advisories/CVE-2026-75029/https://agentprime.io/advisories/CVE-2026-75029/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 14:15:12 GMTCVECVE-2026-19668: Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matchinghttps://agentprime.io/advisories/CVE-2026-19668/https://agentprime.io/advisories/CVE-2026-19668/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 14:12:34 GMTCVECVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verificationhttps://agentprime.io/advisories/CVE-2026-19033/https://agentprime.io/advisories/CVE-2026-19033/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 14:10:08 GMTCVECVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proofhttps://agentprime.io/advisories/CVE-2026-80274/https://agentprime.io/advisories/CVE-2026-80274/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 14:07:20 GMTCVECVE-2026-76163: named aborts on a TKEY query when the user configuration has no global options statementhttps://agentprime.io/advisories/CVE-2026-76163/https://agentprime.io/advisories/CVE-2026-76163/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 14:05:34 GMTCVECVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 pathhttps://agentprime.io/advisories/CVE-2026-19666/https://agentprime.io/advisories/CVE-2026-19666/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 14:02:30 GMTCVECVE-2026-81563: SVCB AliasMode additional-data error leaks qpcache referenceshttps://agentprime.io/advisories/CVE-2026-81563/https://agentprime.io/advisories/CVE-2026-81563/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 14:00:04 GMTCVECVE-2026-78301: Out-of-zone database nodes can become authoritative zone cutshttps://agentprime.io/advisories/CVE-2026-78301/https://agentprime.io/advisories/CVE-2026-78301/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 13:58:11 GMTCVECVE-2026-77692: Unauthenticated remote crash of named via a single DoH SIG(0) requesthttps://agentprime.io/advisories/CVE-2026-77692/https://agentprime.io/advisories/CVE-2026-77692/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 13:55:45 GMTCVECVE-2026-19941: checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proofhttps://agentprime.io/advisories/CVE-2026-19941/https://agentprime.io/advisories/CVE-2026-19941/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 13:52:49 GMTCVECVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolverhttps://agentprime.io/advisories/CVE-2026-19662/https://agentprime.io/advisories/CVE-2026-19662/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 13:50:10 GMTCVECVE-2026-19667: Remote assertion failure via 16-bit length truncation in `dns_ncache_add()`https://agentprime.io/advisories/CVE-2026-19667/https://agentprime.io/advisories/CVE-2026-19667/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 13:46:56 GMTCVECVE-2026-81736: Remote CPU denial of service through cached SVCB/HTTPS AliasMode treeshttps://agentprime.io/advisories/CVE-2026-81736/https://agentprime.io/advisories/CVE-2026-81736/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 13:44:28 GMTCVECVE-2026-13321: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Fieldhttps://agentprime.io/advisories/CVE-2026-13321/https://agentprime.io/advisories/CVE-2026-13321/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 14:16:10 GMTCVECVE-2026-13204: Unexpected exit in certain situations with NSEC and NSEC3 both presenthttps://agentprime.io/advisories/CVE-2026-13204/https://agentprime.io/advisories/CVE-2026-13204/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 14:15:30 GMTCVECVE-2026-12617: Record ordering based unexpected exit with CNAME or DNAMEhttps://agentprime.io/advisories/CVE-2026-12617/https://agentprime.io/advisories/CVE-2026-12617/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 14:14:46 GMTCVECVE-2026-11721: Cache poisoning possible with label count discrepancy, RRSIG, and wildcardshttps://agentprime.io/advisories/CVE-2026-11721/https://agentprime.io/advisories/CVE-2026-11721/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 14:13:08 GMTCVECVE-2026-11622: Potential memory usage beyond configured limitshttps://agentprime.io/advisories/CVE-2026-11622/https://agentprime.io/advisories/CVE-2026-11622/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 14:12:19 GMTCVECVE-2026-11605: Unnecessary validation of DNSSEC signed recordshttps://agentprime.io/advisories/CVE-2026-11605/https://agentprime.io/advisories/CVE-2026-11605/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 14:11:37 GMTCVECVE-2026-11331: Potential wildcard CNAME RPZ policy bypasshttps://agentprime.io/advisories/CVE-2026-11331/https://agentprime.io/advisories/CVE-2026-11331/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 14:10:44 GMTCVECVE-2026-10822: Key Record using PRIVATEDNS algorithm may lead to unexpected exithttps://agentprime.io/advisories/CVE-2026-10822/https://agentprime.io/advisories/CVE-2026-10822/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 14:09:57 GMTCVECVE-2026-10723: Incorrect acceptance of NSEC3 recordshttps://agentprime.io/advisories/CVE-2026-10723/https://agentprime.io/advisories/CVE-2026-10723/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 14:08:19 GMTCVECVE-2026-5950: Unbounded resend loop in BIND 9 resolverhttps://agentprime.io/advisories/CVE-2026-5950/https://agentprime.io/advisories/CVE-2026-5950/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 13:10:19 GMTCVECVE-2026-5947: SIG(0) validation during query flood may lead to undefined behaviorhttps://agentprime.io/advisories/CVE-2026-5947/https://agentprime.io/advisories/CVE-2026-5947/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 13:10:11 GMTCVECVE-2026-5946: Invalid handling of CLASS != INhttps://agentprime.io/advisories/CVE-2026-5946/https://agentprime.io/advisories/CVE-2026-5946/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 13:10:03 GMTCVECVE-2026-3593: Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementationhttps://agentprime.io/advisories/CVE-2026-3593/https://agentprime.io/advisories/CVE-2026-3593/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 13:09:47 GMTCVECVE-2026-3592: Amplification vulnerabilities via self-pointed glue recordshttps://agentprime.io/advisories/CVE-2026-3592/https://agentprime.io/advisories/CVE-2026-3592/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 13:09:21 GMTCVECVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiationhttps://agentprime.io/advisories/CVE-2026-3039/https://agentprime.io/advisories/CVE-2026-3039/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 13:09:04 GMTCVECVE-2026-3591: A stack use-after-return flaw in SIG(0) handling code may enable ACL bypasshttps://agentprime.io/advisories/CVE-2026-3591/https://agentprime.io/advisories/CVE-2026-3591/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Mar 2026 13:34:14 GMTCVECVE-2026-3119: Authenticated query containing a TKEY record may cause named to terminate unexpectedlyhttps://agentprime.io/advisories/CVE-2026-3119/https://agentprime.io/advisories/CVE-2026-3119/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Mar 2026 13:31:54 GMTCVECVE-2026-3104: Memory leak in code preparing DNSSEC proofs of non-existencehttps://agentprime.io/advisories/CVE-2026-3104/https://agentprime.io/advisories/CVE-2026-3104/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Mar 2026 13:29:19 GMTCVECVE-2026-1519: Excessive NSEC3 iterations cause high CPU load during insecure delegation validationhttps://agentprime.io/advisories/CVE-2026-1519/https://agentprime.io/advisories/CVE-2026-1519/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Mar 2026 13:25:19 GMTCVECVE-2025-13878: Malformed BRID/HHIT records can cause named to terminate unexpectedlyhttps://agentprime.io/advisories/CVE-2025-13878/https://agentprime.io/advisories/CVE-2025-13878/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Jan 2026 14:43:27 GMTCVECVE-2025-40780: Cache poisoning due to weak PRNGhttps://agentprime.io/advisories/CVE-2025-40780/https://agentprime.io/advisories/CVE-2025-40780/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Oct 2025 15:48:27 GMTCVECVE-2025-40778: Cache poisoning attacks with unsolicited RRshttps://agentprime.io/advisories/CVE-2025-40778/https://agentprime.io/advisories/CVE-2025-40778/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Oct 2025 15:47:13 GMTCVECVE-2025-8677: Resource exhaustion via malformed DNSKEY handlinghttps://agentprime.io/advisories/CVE-2025-8677/https://agentprime.io/advisories/CVE-2025-8677/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.11 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Oct 2025 15:43:10 GMTCVEcriticalCVE-2025-40777: A possible assertion failure when 'stale-answer-client-timeout' is set to '0'https://agentprime.io/advisories/CVE-2025-40777/https://agentprime.io/advisories/CVE-2025-40777/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Jul 2025 17:38:06 GMTCVECVE-2025-40776: Birthday Attack against Resolvers supporting ECShttps://agentprime.io/advisories/CVE-2025-40776/https://agentprime.io/advisories/CVE-2025-40776/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Jul 2025 13:41:01 GMTCVECVE-2025-40775: DNS message with invalid TSIG causes an assertion failurehttps://agentprime.io/advisories/CVE-2025-40775/https://agentprime.io/advisories/CVE-2025-40775/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.15 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 May 2025 12:35:01 GMTCVEcriticalCVE-2024-12705: DNS-over-HTTPS implementation suffers from multiple issues under heavy query loadhttps://agentprime.io/advisories/CVE-2024-12705/https://agentprime.io/advisories/CVE-2024-12705/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.19 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jan 2025 21:40:27 GMTCVEcriticalCVE-2024-11187: Many records in the additional section cause CPU exhaustionhttps://agentprime.io/advisories/CVE-2024-11187/https://agentprime.io/advisories/CVE-2024-11187/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.16 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jan 2025 21:40:11 GMTCVEcriticalCVE-2024-4076: Assertion failure when serving both stale cache data and authoritative zone contenthttps://agentprime.io/advisories/CVE-2024-4076/https://agentprime.io/advisories/CVE-2024-4076/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Jul 2024 14:40:57 GMTCVECVE-2024-1975: SIG(0) can be used to exhaust CPU resourceshttps://agentprime.io/advisories/CVE-2024-1975/https://agentprime.io/advisories/CVE-2024-1975/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Jul 2024 14:38:57 GMTCVECVE-2024-1737: BIND's database will be slow if a very large number of RRs exist at the same namehttps://agentprime.io/advisories/CVE-2024-1737/https://agentprime.io/advisories/CVE-2024-1737/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Jul 2024 14:34:09 GMTCVECVE-2024-0760: A flood of DNS messages over TCP may make the server unstablehttps://agentprime.io/advisories/CVE-2024-0760/https://agentprime.io/advisories/CVE-2024-0760/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Jul 2024 14:26:54 GMTCVE