Known vulnerabilities in bind9.16 (Red Hat package)
Vendor:
Red Hat Inc.
Software:
bind9.16 (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:bind9.16_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
20
Public exploits:
2
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (20)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU94713 - Reachable Assertion CVE-2024-4076 |
CWE-617 | Medium | 9.16.23-0.7.el8_6.6, 9.16.23-0.14.el8_8.5 | 24.07.2024 |
SB2024072415 SB2024072417 SB2024072418 and 36 more |
||
| #VU94711 - Resource exhaustion CVE-2024-1975 |
CWE-400 | Medium | 9.16.23-0.7.el8_6.6, 9.16.23-0.14.el8_8.5 | 24.07.2024 |
SB2024072415 SB2024072417 SB2024072418 and 72 more |
||
| #VU94710 - Resource Management Errors CVE-2024-1737 |
CWE-399 | Medium | 9.16.23-0.7.el8_6.6, 9.16.23-0.14.el8_8.5 | 24.07.2024 |
SB2024072415 SB2024072417 SB2024072418 and 73 more |
||
| #VU86383 - Resource exhaustion CVE-2023-4408 |
CWE-400 | Medium | 9.16.23-0.7.el8_6.5, 9.16.23-0.14.el8_8.4, 9.16.23-0.16.el8_9.2 | 13.02.2024 |
SB2024021329 SB2024021330 SB2024021347 and 82 more |
||
| #VU86382 - Reachable Assertion CVE-2023-5517 |
CWE-617 | Medium | 9.16.23-0.7.el8_6.5, 9.16.23-0.14.el8_8.4, 9.16.23-0.16.el8_9.2 | 13.02.2024 |
SB2024021329 SB2024021330 SB2024021347 and 43 more |
||
| #VU86381 - Reachable Assertion CVE-2023-5679 |
CWE-617 | Medium | 9.16.23-0.7.el8_6.5, 9.16.23-0.14.el8_8.4, 9.16.23-0.16.el8_9.2 | 13.02.2024 |
SB2024021329 SB2024021330 SB2024021347 and 36 more |
||
| #VU86379 - Resource exhaustion CVE-2023-6516 |
CWE-400 | Medium | 9.16.23-0.7.el8_6.5, 9.16.23-0.14.el8_8.4, 9.16.23-0.16.el8_9.2 | 13.02.2024 |
SB2024021329 SB2024021347 SB2024021709 and 39 more |
||
| #VU86378 - Resource exhaustion CVE-2023-50868 |
CWE-400 | Medium | 9.16.23-0.7.el8_6.5, 9.16.23-0.14.el8_8.4, 9.16.23-0.16.el8_9.2 | 13.02.2024 |
SB2024021325 SB2024021330 SB2024021329 and 143 more |
||
| #VU86377 - Resource exhaustion CVE-2023-50387 |
CWE-400 | Medium | 9.16.23-0.7.el8_6.5, 9.16.23-0.14.el8_8.4, 9.16.23-0.16.el8_9.2 | 13.02.2024 |
SB2024021325 SB2024021330 SB2024021329 and 145 more |
||
| #VU80931 - Resource exhaustion CVE-2023-3341 |
CWE-400 | Medium | 9.16.23-0.7.el8_6.3, 9.16.23-0.14.el8_8.2 | 20.09.2023 |
SB2023092048 SB2023092050 SB2023092148 and 90 more |
||
| #VU77612 - Resource exhaustion CVE-2023-2828 |
CWE-400 | Medium | 9.16.23-0.7.el8_6.2, 9.16.23-0.14.el8_8.1 | 21.06.2023 |
SB2023062155 SB2023062201 SB2023062601 and 66 more |
||
| #VU71531 - Reachable Assertion CVE-2022-3924 |
CWE-617 | Medium | 9.16.23-0.14.el8 | 25.01.2023 |
SB2023012556 SB2023012559 SB2023012602 and 19 more |
||
| #VU71530 - Improper input validation CVE-2022-3736 |
CWE-20 | Medium | 9.16.23-0.14.el8 | 25.01.2023 |
SB2023012556 SB2023012559 SB2023012602 and 18 more |
||
| #VU71529 - Resource exhaustion CVE-2022-3094 |
CWE-400 | Medium | 9.16.23-0.14.el8 | 25.01.2023 |
SB2023012556 SB2023012559 SB2023012602 and 47 more |
||
| #VU67550 - Missing release of memory after effective lifetime CVE-2022-38178 |
CWE-401 | Medium | 9.16.23-0.7.el8_6.1 | 21.09.2022 |
SB2022092131 SB2022092140 SB2022092147 and 48 more |
||
| #VU67549 - Missing release of memory after effective lifetime CVE-2022-38177 |
CWE-401 | Medium | 9.16.23-0.7.el8_6.1, 9.16.23-0.9.el8.1 | 21.09.2022 |
SB2022092131 SB2022092140 SB2022092143 and 52 more |
||
| #VU67548 - Improper input validation CVE-2022-3080 |
CWE-20 | Medium | 9.16.23-0.7.el8_6.1 | 21.09.2022 |
SB2022092131 SB2022092140 SB2022092147 and 18 more |
||
| #VU67545 - Resource Management Errors CVE-2022-2795 |
CWE-399 | Medium | 9.16.23-0.14.el8 | 21.09.2022 |
SB2022092131 SB2022092140 SB2022092143 and 71 more |
||
| #VU61423 - Resource Management Errors CVE-2022-0396 |
CWE-399 | Medium | 9.16.23-0.9.el8.1 | 17.03.2022 |
SB2022031701 SB2022031719 SB2022031728 and 17 more |
||
| #VU61422 - Reliance on Reverse DNS Resolution for a Security-Critical Action CVE-2021-25220 |
CWE-350 | Medium | 9.16.23-0.9.el8.1 | 17.03.2022 |
SB2022031701 SB2022031719 SB2022031725 and 57 more |