Skip to content
OpenAdvisories
High DSA-5504-1 1 CVE

bind9 - security update

Published Sep 22, 2023 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 11 bind9 1:9.16.44-1~deb11u1
Debian · 12 bind9 1:9.18.19-1~deb12u1

Vulnerabilities 1

  • High 7.5

    A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly

    The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing co…