Known vulnerabilities in bind-dnssec-utils

Known vulnerabilities in bind-dnssec-utils

Vendor: OpenAnolis

Software: bind-dnssec-utils

Software CPE: cpe:2.3:o:openanolis:bind-dnssec-utils:*:*:*:*:*:anolis_os:*:*

Website: https://openanolis.cn/

Total vulnerabilities: 19

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (19)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU139213 - Improper input validation CVE-2026-10822	CWE-20	Medium	No	No	9.20.26-1	23.07.2026	SB2026072347 SB2026072441 SB2026073103 and 9 more
#VU139212 - Improper Check or Handling of Exceptional Conditions CVE-2026-11331	CWE-703	Medium	No	No	9.20.26-1	23.07.2026	SB2026072347 SB2026072441 SB2026073103 and 19 more
#VU139210 - Resource exhaustion CVE-2026-11622	CWE-400	Medium	No	No	9.20.26-1	23.07.2026	SB2026072347 SB2026072441 SB2026073103 and 23 more
#VU139209 - Improper input validation CVE-2026-11721	CWE-20	Medium	No	No	9.20.26-1	23.07.2026	SB2026072347 SB2026072441 SB2026073103 and 23 more
#VU139208 - Improper Check for Unusual or Exceptional Conditions CVE-2026-12617	CWE-754	Medium	No	No	9.20.26-1	23.07.2026	SB2026072347 SB2026072441 SB2026073103 and 9 more
#VU139207 - Reachable Assertion CVE-2026-13204	CWE-617	Medium	No	No	9.20.26-1	23.07.2026	SB2026072347 SB2026072441 SB2026073103 and 22 more
#VU139206 - Improper input validation CVE-2026-13321	CWE-20	Low	No	No	9.20.26-1	23.07.2026	SB2026072347 SB2026072441 SB2026073103 and 23 more
#VU132119 - Missing release of memory after effective lifetime CVE-2026-3039	CWE-401	Medium	No	No	9.18.49-1	22.05.2026	SB2026052202 SB2026052211 SB2026052212 and 23 more
#VU132118 - Resource exhaustion CVE-2026-3592	CWE-400	Medium	No	No	9.18.49-1	22.05.2026	SB2026052202 SB2026052211 SB2026052212 and 19 more
#VU132116 - Improper Handling of Exceptional Conditions CVE-2026-5946	CWE-755	Medium	No	No	9.18.49-1	22.05.2026	SB2026052202 SB2026052211 SB2026052212 and 23 more
#VU132114 - Resource exhaustion CVE-2026-5950	CWE-400	Medium	No	No	9.18.49-1	22.05.2026	SB2026052202 SB2026052211 SB2026052212 and 9 more
#VU117610 - Insufficient Verification of Data Authenticity CVE-2025-40778	CWE-345	Medium	Available	No	9.18.34-3	23.10.2025	SB2025102373 SB2025102393 SB20251023133 and 60 more
#VU117604 - Predictable Seed in Pseudo-Random Number Generator (PRNG) CVE-2025-40780	CWE-337	Medium	No	No	9.18.34-2	23.10.2025	SB2025102373 SB2025102393 SB20251023133 and 41 more
#VU117577 - Resource exhaustion CVE-2025-8677	CWE-400	Medium	No	No	9.18.34-4	23.10.2025	SB2025102373 SB2025102393 SB20251023133 and 28 more
#VU103437 - Resource Management Errors CVE-2024-12705	CWE-399	Medium	No	No	9.18.34-1	29.01.2025	SB2025012964 SB2025012962 SB2025012965 and 15 more
#VU103436 - Resource exhaustion CVE-2024-11187	CWE-400	Medium	No	No	9.18.34-1	29.01.2025	SB2025012962 SB2025012964 SB2025012965 and 83 more
#VU94713 - Reachable Assertion CVE-2024-4076	CWE-617	Medium	No	No	9.18.27-2	24.07.2024	SB2024072415 SB2024072417 SB2024072418 and 36 more
#VU94711 - Resource exhaustion CVE-2024-1975	CWE-400	Medium	No	No	9.18.27-1, 9.18.28-1	24.07.2024	SB2024072415 SB2024072417 SB2024072418 and 72 more
#VU94710 - Resource Management Errors CVE-2024-1737	CWE-399	Medium	No	No	9.18.28-1	24.07.2024	SB2024072415 SB2024072417 SB2024072418 and 73 more