| CVE-2018-5734 |
While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR…
|
7.5
High
|
Jan 16, 2019 |
| CVE-2018-5741 |
To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to update records in a zone, BIND 9 provides…
|
6.5
Medium
|
Jan 16, 2019 |
| CVE-2017-3141 |
The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege…
|
7.2
High
|
Jan 16, 2019 |
| CVE-2017-3140 |
If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition…
|
3.7
Low
|
Jan 16, 2019 |
| CVE-2017-3138 |
named contains a feature which allows operators to issue commands to a running server by communicating with the server…
|
6.5
Medium
|
Jan 16, 2019 |
| CVE-2017-3145 |
BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a…
|
7.5
High
|
Jan 16, 2019 |
| CVE-2017-3137 |
Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME…
|
7.5
High
|
Jan 16, 2019 |
| CVE-2017-3136 |
A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and…
|
5.9
Medium
|
Jan 16, 2019 |
| CVE-2017-3143 |
An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid…
|
7.5
High
|
Jan 16, 2019 |
| CVE-2017-3135 |
Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an…
|
7.5
High
|
Jan 16, 2019 |
| CVE-2017-3142 |
An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid…
|
5.3
Medium
|
Jan 16, 2019 |
| CVE-2016-9778 |
An error in handling certain queries can cause an assertion failure when a server is using the nxdomain-redirect feature…
|
7.5
High
|
Jan 16, 2019 |