Vulnerabilities

TI-2019-04530 CVE-2019-6465 · GHSA-5hgv-gr6q-xvqx

Zone transfer controls for writable DLZ zones were not effective

LOW 31

Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P2, 9.12.0 -> 9.12.3-P2, and versions 9.…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03979 Published 2019-10-09 Partial fix CWE-732

TI-2018-04152 CVE-2018-5745 · GHSA-p5r3-98fj-vgcv

An assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys

LOW 27

"managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02293 Published 2019-10-09 Partial fix CWE-327

Vulnerabilities

Filters

Zone transfer controls for writable DLZ zones were not effective

An assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys