Skip to content
OpenAdvisories
High DSA-4440-1 3 CVEs

bind9 - security update

Published May 9, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 bind9 1:9.10.3.dfsg.P4-12.3+deb9u5

Vulnerabilities 3

  • High 7.5
    CVE-2018-5743

    Limiting simultaneous TCP clients was ineffective

    By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which …

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2019-6465

    Zone transfer controls for writable DLZ zones were not effective

    Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P2, 9.12.0 -> 9.12.3-P2, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine
  • Medium 4.9
    CVE-2018-5745

    An assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys

    "managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses m…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine