수정 버전
설치된 버전 확인
named -v9.20 에 영향을 주는 CVE
| CVE | 제목 | CVSS | 악용 | EPSS | 공개일 |
|---|---|---|---|---|---|
| CVE-2026-3593 | Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation | 9.8 | — | 2026-05-20 | |
| CVE-2026-13321 | DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field | 8.6 | — | 2026-07-22 | |
| CVE-2026-11622 | Potential memory usage beyond configured limits | 7.5 | — | 2026-07-22 | |
| CVE-2026-12617 | Record ordering based unexpected exit with CNAME or DNAME | 7.5 | — | 2026-07-22 | |
| CVE-2026-3039 | BIND 9 server memory exhaustion during GSS-API TKEY negotiation | 7.5 | — | 2026-05-20 | |
| CVE-2026-1519 | Excessive NSEC3 iterations cause high CPU load during insecure delegation validation | 7.5 | — | 2026-03-25 | |
| CVE-2026-13204 | Unexpected exit in certain situations with NSEC and NSEC3 both present | 7.5 | — | 2026-07-22 | |
| CVE-2026-5946 | Invalid handling of CLASS != IN | 7.5 | — | 2026-05-20 | |
| CVE-2026-11721 | Cache poisoning possible with label count discrepancy, RRSIG, and wildcards | 7.5 | — | 2026-07-22 | |
| CVE-2026-3104 | Memory leak in code preparing DNSSEC proofs of non-existence | 7.5 | — | 2026-03-25 | |
| CVE-2026-11605 | Unnecessary validation of DNSSEC signed records | 7.5 | — | 2026-07-22 | |
| CVE-2026-11331 | Potential wildcard CNAME RPZ policy bypass | 7.5 | — | 2026-07-22 | |
| CVE-2026-10723 | Incorrect acceptance of NSEC3 records | 6.8 | — | 2026-07-22 | |
| CVE-2026-3119 | Authenticated query containing a TKEY record may cause named to terminate unexpectedly | 6.5 | — | 2026-03-25 | |
| CVE-2026-10822 | Key Record using PRIVATEDNS algorithm may lead to unexpected exit | 6.5 | — | 2026-07-22 | |
| CVE-2026-5947 | SIG(0) validation during query flood may lead to undefined behavior | 5.9 | — | 2026-05-20 | |
| CVE-2026-3591 | A stack use-after-return flaw in SIG(0) handling code may enable ACL bypass | 5.4 | — | 2026-03-25 | |
| CVE-2026-3592 | Amplification vulnerabilities via self-pointed glue records | 5.3 | — | 2026-05-20 | |
| CVE-2026-5950 | Unbounded resend loop in BIND 9 resolver | 5.3 | — | 2026-05-20 |
내 서버의 버전을 직접 추적하세요
InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.
데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).