bind 9

A logic bug in widely deployed BIND 9 resolvers—tracked as CVE-2024-4076—can cause named to hit an assertion and terminate when a single client query simultaneously triggers serving stale cache data and requires lookups in local authoritative zone content, creating a remotely exploitable...

Resolver operators and DNS administrators should treat CVE‑2024‑1737 as an urgent operational risk: a BIND 9 flaw that can slow or stall resolver caches and authoritative zone databases when large numbers of resource records (RRs) are concentrated at a single owner name, and ISC has published...

A remotely exploitable flaw in BIND 9 allows a malicious client to flood a server with DNS messages over TCP and drive the process into an unstable, unavailable state — an availability-impacting denial-of-service that can leave resolvers and authoritative servers unresponsive while the attack...