Behoben in
Version prüfen
named -vCVEs, die 9.21 betreffen
| CVE | Titel | CVSS | Ausgenutzt | EPSS | Veröffentlicht |
|---|---|---|---|---|---|
| CVE-2026-3593 | Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation | 9.8 | — | 2026-05-20 | |
| CVE-2026-3039 | BIND 9 server memory exhaustion during GSS-API TKEY negotiation | 7.5 | — | 2026-05-20 | |
| CVE-2026-1519 | Excessive NSEC3 iterations cause high CPU load during insecure delegation validation | 7.5 | — | 2026-03-25 | |
| CVE-2026-5946 | Invalid handling of CLASS != IN | 7.5 | — | 2026-05-20 | |
| CVE-2026-3104 | Memory leak in code preparing DNSSEC proofs of non-existence | 7.5 | — | 2026-03-25 | |
| CVE-2026-3119 | Authenticated query containing a TKEY record may cause named to terminate unexpectedly | 6.5 | — | 2026-03-25 | |
| CVE-2026-5947 | SIG(0) validation during query flood may lead to undefined behavior | 5.9 | — | 2026-05-20 | |
| CVE-2026-3591 | A stack use-after-return flaw in SIG(0) handling code may enable ACL bypass | 5.4 | — | 2026-03-25 | |
| CVE-2026-3592 | Amplification vulnerabilities via self-pointed glue records | 5.3 | — | 2026-05-20 | |
| CVE-2026-5950 | Unbounded resend loop in BIND 9 resolver | 5.3 | — | 2026-05-20 |
Verfolgen Sie diese Versionen auf Ihren eigenen Servern
InfraGuard erfasst die installierten Softwareversionen auf jedem Server und markiert diejenigen mit bekannten Schwachstellen. Self-Hosted – nichts verlässt Ihr Netzwerk.
Daten: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (siehe EPSS unter https://www.first.org/epss), endoflife.date. Softwareliste: awesome-selfhosted (CC BY-SA 3.0).