Skip to content
OpenAdvisories
High DLA-3726-1 1 CVE

bind9 - security update

Published Jan 30, 2024 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 10 bind9 1:9.11.5.P4+dfsg-5.1+deb10u10

Vulnerabilities 1

  • High 7.5

    A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly

    The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing co…