Skip to content
OpenAdvisories
Medium DLA-1697-1 2 CVEs

bind9 - security update

Published Feb 28, 2019 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 8 bind9 1:9.9.5.dfsg-9+deb8u17

Vulnerabilities 2

  • Medium 5.3

    Zone transfer controls for writable DLZ zones were not effective

    Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P2, 9.12.0 -> 9.12.3-P2, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported…

  • Medium 4.9

    An assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys

    "managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses m…