Known vulnerabilities in bind-chroot
Vendor:
OpenAnolis
Software:
bind-chroot
Software CPE:
cpe:2.3:o:openanolis:bind-chroot:*:*:*:*:*:anolis_os:*:*
Website:
https://openanolis.cn/
Total vulnerabilities:
43
Public exploits:
4
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
Vulnerabilities (43)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU139213 - Improper input validation CVE-2026-10822 |
CWE-20 | Medium | 9.20.26-1 | 23.07.2026 |
SB2026072347 SB2026072441 SB2026073103 and 5 more |
||
| #VU139212 - Improper Check or Handling of Exceptional Conditions CVE-2026-11331 |
CWE-703 | Medium | 9.20.26-1 | 23.07.2026 |
SB2026072347 SB2026072441 SB2026073103 and 12 more |
||
| #VU139210 - Resource exhaustion CVE-2026-11622 |
CWE-400 | Medium | 9.20.26-1 | 23.07.2026 |
SB2026072347 SB2026072441 SB2026073103 and 15 more |
||
| #VU139209 - Improper input validation CVE-2026-11721 |
CWE-20 | Medium | 9.20.26-1 | 23.07.2026 |
SB2026072347 SB2026072441 SB2026073103 and 15 more |
||
| #VU139208 - Improper Check for Unusual or Exceptional Conditions CVE-2026-12617 |
CWE-754 | Medium | 9.20.26-1 | 23.07.2026 |
SB2026072347 SB2026072441 SB2026073103 and 5 more |
||
| #VU139207 - Reachable Assertion CVE-2026-13204 |
CWE-617 | Medium | 9.20.26-1 | 23.07.2026 |
SB2026072347 SB2026072441 SB2026073103 and 15 more |
||
| #VU139206 - Improper input validation CVE-2026-13321 |
CWE-20 | Low | 9.20.26-1 | 23.07.2026 |
SB2026072347 SB2026072441 SB2026073103 and 15 more |
||
| #VU132119 - Missing release of memory after effective lifetime CVE-2026-3039 |
CWE-401 | Medium | 9.11.36-16.0.1, 9.18.49-1 | 22.05.2026 |
SB2026052202 SB2026052211 SB2026052212 and 21 more |
||
| #VU132118 - Resource exhaustion CVE-2026-3592 |
CWE-400 | Medium | 9.18.49-1 | 22.05.2026 |
SB2026052202 SB2026052211 SB2026052212 and 18 more |
||
| #VU132116 - Improper Handling of Exceptional Conditions CVE-2026-5946 |
CWE-755 | Medium | 9.11.36-16.0.1, 9.18.49-1 | 22.05.2026 |
SB2026052202 SB2026052211 SB2026052212 and 21 more |
||
| #VU132114 - Resource exhaustion CVE-2026-5950 |
CWE-400 | Medium | 9.18.49-1 | 22.05.2026 |
SB2026052202 SB2026052211 SB2026052212 and 8 more |
||
| #VU124616 - Resource exhaustion CVE-2026-1519 |
CWE-400 | Medium | 9.11.36-16.0.1 | 25.03.2026 |
SB20260325207 SB20260325210 SB20260325211 and 40 more |
||
| #VU117610 - Insufficient Verification of Data Authenticity CVE-2025-40778 |
CWE-345 | Medium | 9.11.4-26.P2, 9.11.36-16.0.1, 9.18.34-3 | 23.10.2025 |
SB2025102373 SB2025102393 SB20251023133 and 60 more |
||
| #VU117604 - Predictable Seed in Pseudo-Random Number Generator (PRNG) CVE-2025-40780 |
CWE-337 | Medium | 9.18.34-2 | 23.10.2025 |
SB2025102373 SB2025102393 SB20251023133 and 41 more |
||
| #VU117577 - Resource exhaustion CVE-2025-8677 |
CWE-400 | Medium | 9.18.34-4 | 23.10.2025 |
SB2025102373 SB2025102393 SB20251023133 and 28 more |
||
| #VU103437 - Resource Management Errors CVE-2024-12705 |
CWE-399 | Medium | 9.18.34-1 | 29.01.2025 |
SB2025012964 SB2025012962 SB2025012965 and 15 more |
||
| #VU94711 - Resource exhaustion CVE-2024-1975 |
CWE-400 | Medium | 9.11.4-26.P2, 9.11.36-16.0.1, 9.18.27-1, 9.18.28-1 | 24.07.2024 |
SB2024072415 SB2024072417 SB2024072418 and 72 more |
||
| #VU94710 - Resource Management Errors CVE-2024-1737 |
CWE-399 | Medium | 9.11.4-26.P2, 9.11.36-16.0.1, 9.18.28-1 | 24.07.2024 |
SB2024072415 SB2024072417 SB2024072418 and 73 more |
||
| #VU86383 - Resource exhaustion CVE-2023-4408 |
CWE-400 | Medium | 9.11.4-26.P2, 9.11.36-14.0.1 | 13.02.2024 |
SB2024021329 SB2024021330 SB2024021347 and 82 more |
||
| #VU86377 - Resource exhaustion CVE-2023-50387 |
CWE-400 | Medium | 9.11.4-26.P2, 9.11.36-14.0.1 | 13.02.2024 |
SB2024021325 SB2024021330 SB2024021329 and 145 more |
Showing elements 1 - 20 out of 43