Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
Jede Zeile ist Paketindex-Metadaten für eine Version, Architektur, Suite und ein Repository. Namen, URLs und Größen stammen aus der Quelle; ein Link ist ein veränderbarer Abrufort, kein Weitergabanspruch von OpenFactory.
The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A rec
High(8.6)
UnbekanntDetails (4)
1:9.20.26-1~deb13u1 · amd64 · trixie-security · Historical version
The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritat
High(8.6)
UnbekanntDetails (4)
1:9.20.26-1~deb13u1 · amd64 · trixie-security · Historical version
BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typi
High(7.5)
UnbekanntDetails (4)
1:9.20.26-1~deb13u1 · amd64 · trixie-security · Historical version
BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resour
Medium(5.3)
UnbekanntDetails (4)
1:9.20.26-1~deb13u1 · amd64 · trixie-security · Historical version
Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CHAOS` or `HESIOD`, or DNS messages that specify meta-classes
High(7.5)
UnbekanntDetails (4)
1:9.20.26-1~deb13u1 · amd64 · trixie-security · Historical version
An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthenticated attacker to cause severe resource exhaustion by sending
Medium(5.3)
UnbekanntDetails (4)
1:9.20.26-1~deb13u1 · amd64 · trixie-security · Historical version
A use-after-free vulnerability exists within the DNS-over-HTTPS implementation.
This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, and 9.20.9-S1 through 9.20.22-S1.
BIN
High(7.4)
UnbekanntDetails (4)
1:9.20.26-1~deb13u1 · amd64 · trixie-security · Historical version
Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signed with SIG(0), it begins work to validate that signature. I
High(7.5)
UnbekanntDetails (4)
1:9.20.26-1~deb13u1 · amd64 · trixie-security · Historical version
BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses.
This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0
High(8.6)
Unbekannt
Die Paketzuordnung läuft. Beobachtet:
Details (4)
1:9.20.26-1~deb13u1 · amd64 · trixie-security · Historical version
Behoben · Behoben: 1:9.20.26-1~deb13u1
nvd · bind9 · debian · 13
1:9.20.26-1~deb13u1 · arm64 · trixie-security
Behoben · Behoben: 1:9.20.26-1~deb13u1
nvd · bind9 · debian · 13
1:9.20.29-1~deb13u1 · amd64 · trixie-security · Historical version
If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit.
BIND will first need to store a DNS record for a key (KEY
High(8.6)
Unbekannt
Die Paketzuordnung läuft. Beobachtet:
Details (4)
1:9.20.26-1~deb13u1 · amd64 · trixie-security · Historical version
Behoben · Behoben: 1:9.20.26-1~deb13u1
nvd · bind9 · debian · 13
1:9.20.26-1~deb13u1 · arm64 · trixie-security
Behoben · Behoben: 1:9.20.26-1~deb13u1
nvd · bind9 · debian · 13
1:9.20.29-1~deb13u1 · amd64 · trixie-security · Historical version
An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not h
High(8.6)
Unbekannt
Die Paketzuordnung läuft. Beobachtet:
Details (4)
1:9.20.26-1~deb13u1 · amd64 · trixie-security · Historical version
Behoben · Behoben: 1:9.20.26-1~deb13u1
nvd · bind9 · debian · 13
1:9.20.26-1~deb13u1 · arm64 · trixie-security
Behoben · Behoben: 1:9.20.26-1~deb13u1
nvd · bind9 · debian · 13
1:9.20.29-1~deb13u1 · amd64 · trixie-security · Historical version
A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the re
High(8.6)
Unbekannt
Die Paketzuordnung läuft. Beobachtet:
Details (4)
1:9.20.26-1~deb13u1 · amd64 · trixie-security · Historical version
Behoben · Behoben: 1:9.20.26-1~deb13u1
nvd · bind9 · debian · 13
1:9.20.26-1~deb13u1 · arm64 · trixie-security
Behoben · Behoben: 1:9.20.26-1~deb13u1
nvd · bind9 · debian · 13
1:9.20.29-1~deb13u1 · amd64 · trixie-security · Historical version
It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes `named` to produce a wildcard n
High(8.6)
Unbekannt
Die Paketzuordnung läuft. Beobachtet:
Details (4)
1:9.20.26-1~deb13u1 · amd64 · trixie-security · Historical version
Behoben · Behoben: 1:9.20.26-1~deb13u1
nvd · bind9 · debian · 13
1:9.20.26-1~deb13u1 · arm64 · trixie-security
Behoben · Behoben: 1:9.20.26-1~deb13u1
nvd · bind9 · debian · 13
1:9.20.29-1~deb13u1 · amd64 · trixie-security · Historical version
