bind (SUSE:OpenStack Cloud 6) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:OpenStack Cloud 6 package bind, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2017-3143 — CVSS 7.5 (high): An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the…
• CVE-2017-3145 — CVSS 7.5 (high): BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error…
• CVE-2017-3142 — CVSS 5.3 (medium): An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be…