Поиск уязвимостей
Количество 25
Количество 25
BDU:2025-01459
Уязвимость сервера DNS BIND, связанная с асимметричным потреблением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20250716-01
Уязвимость bind-dyndb-ldap
ALT-PU-2025-2330
ALT-PU-2025-2330: package `bind` update to version 9.16.50-alt2
ALT-PU-2025-2222
ALT-PU-2025-2222: package `bind` update to version 9.18.33-alt1
CVE-2024-11187
It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.
CVE-2024-11187
It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.
CVE-2024-11187
It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.
CVE-2024-11187
Many records in the additional section cause CPU exhaustion
CVE-2024-11187
It is possible to construct a zone such that some queries to it will g ...
SUSE-SU-2025:0427-1
Security update for bind
SUSE-SU-2025:0389-1
Security update for bind
SUSE-SU-2025:0384-1
Security update for bind
SUSE-SU-2025:0359-1
Security update for bind
RLSA-2025:1681
Important: bind security update
RLSA-2025:1676
Important: bind9.16 security update
RLSA-2025:1675
Important: bind security update
GHSA-w8w2-83mf-6cp5
It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.
ELSA-2025-1718
ELSA-2025-1718: bind security update (IMPORTANT)
ELSA-2025-1681
ELSA-2025-1681: bind security update (IMPORTANT)
ELSA-2025-1676
ELSA-2025-1676: bind9.16 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-01459 Уязвимость сервера DNS BIND, связанная с асимметричным потреблением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 16% Средний | почти 2 года назад |
 | ROS-20250716-01 Уязвимость bind-dyndb-ldap | CVSS3: 7.5 | 16% Средний | больше 1 года назад |
| ALT-PU-2025-2330 ALT-PU-2025-2330: package `bind` update to version 9.16.50-alt2 | CVSS3: 7.5 | 16% Средний | почти 2 года назад |
| ALT-PU-2025-2222 ALT-PU-2025-2222: package `bind` update to version 9.18.33-alt1 | CVSS3: 7.5 | почти 2 года назад | |
 | CVE-2024-11187 It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1. | CVSS3: 7.5 | 16% Средний | почти 2 года назад |
 | CVE-2024-11187 It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1. | CVSS3: 7.5 | 16% Средний | почти 2 года назад |
 | CVE-2024-11187 It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1. | CVSS3: 7.5 | 16% Средний | почти 2 года назад |
 | CVE-2024-11187 Many records in the additional section cause CPU exhaustion | CVSS3: 7.5 | 16% Средний | больше 1 года назад |
| CVE-2024-11187 It is possible to construct a zone such that some queries to it will g ... | CVSS3: 7.5 | 16% Средний | почти 2 года назад |
 | SUSE-SU-2025:0427-1 Security update for bind | 16% Средний | больше 1 года назад | |
| SUSE-SU-2025:0389-1 Security update for bind | 16% Средний | больше 1 года назад | |
| SUSE-SU-2025:0384-1 Security update for bind | 16% Средний | почти 2 года назад | |
| SUSE-SU-2025:0359-1 Security update for bind | 16% Средний | почти 2 года назад | |
 | RLSA-2025:1681 Important: bind security update | 16% Средний | больше 1 года назад | |
| RLSA-2025:1676 Important: bind9.16 security update | 16% Средний | больше 1 года назад | |
| RLSA-2025:1675 Important: bind security update | 16% Средний | больше 1 года назад | |
| GHSA-w8w2-83mf-6cp5 It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1. | CVSS3: 7.5 | 16% Средний | почти 2 года назад |
| ELSA-2025-1718 ELSA-2025-1718: bind security update (IMPORTANT) | 16% Средний | больше 1 года назад | |
| ELSA-2025-1681 ELSA-2025-1681: bind security update (IMPORTANT) | 16% Средний | больше 1 года назад | |
| ELSA-2025-1676 ELSA-2025-1676: bind9.16 security update (IMPORTANT) | 16% Средний | больше 1 года назад |
Уязвимостей на страницу