How many CVEs have a located fix in debian/bind9?

13 published CVEs have a fix traced to functions in debian/bind9, touching 28 functions across 15 files.

Which function in debian/bind9 has been patched by the most CVEs?

answer_response in lib/dns/resolver.c has been changed by 4 CVE fixes, from 2016 to 2019.

How large is a typical CVE fix in debian/bind9?

The median fix changes 42 lines. 46% of fixes change 20 lines or fewer, and 38% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

c

#457 of 500 repositories

debian/bind9

Name: debian/bind9: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix July 23, 2024

13

CVE fixes located

Published CVEs

28

Functions patched

Distinct function sites

15

Files patched

Distinct source files

2016–2024

Years covered

By CVE publication date

Overview

13 published CVEs have a fix traced to functions in debian/bind9, the earliest published in 2016. Those fixes changed 28 distinct functions across 15 files, in 242 patch hunks.

Among the 500 repositories tracked here, debian/bind9 ranks #457 by the number of CVEs with a located fix.

Most patched functions

Functions in debian/bind9 changed by the most CVE fixes.

Most patched files

Files in debian/bind9 changed by the most CVE fixes.

1lib/dns/resolver.c5 CVEs · 5 functions
2lib/dns/message.c4 CVEs · 2 functions
3bin/named/query.c2 CVEs · 1 functions
4bin/named/client.c1 CVEs · 11 functions
5lib/dns/dispatch.c1 CVEs · 3 functions
6bin/named/include/named/client.h1 CVEs · 2 functions
7bin/named/include/named/interfacemgr.h1 CVEs · 1 functions
8bin/named/interfacemgr.c1 CVEs · 1 functions
9bin/named/lwdgrbn.c1 CVEs · 1 functions
10lib/isc/quota.c1 CVEs · 1 functions

Fix size

How much code a CVE fix in debian/bind9 changes, with backports counted once.

42

Median lines changed

Added plus removed, per CVE

46%

Fixes of 20 lines or fewer

Share of CVE fixes

38%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in debian/bind9, and the functions each fix changed.

CVE-2024-1975
CVE-2024-1975dns_message_checksig
High · CVSS 7.5
EPSS 2.1%2024-07-23
CVE-2019-6471
CVE-2019-6471dns_dispatch_getnext do_cancel dns_dispentry
Medium · CVSS 5.9
EPSS 3.3%2019-10-09
CVE-2018-5743
CVE-2018-5743exit_check tcpconn_init interface
High · CVSS 7.5
EPSS 6.5%2019-10-09
CVE-2017-3138
CVE-2017-3138
Medium · CVSS 6.5
EPSS 5.5%2019-01-16
CVE-2017-3135
CVE-2017-3135dns_rdata_checkowner
High · CVSS 7.5
EPSS 17.2%2019-01-16
CVE-2017-3136
CVE-2017-3136
Medium · CVSS 5.9
EPSS 11.2%2019-01-16
A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME
CVE-2017-3137validinanswer cname_target answer_response
High · CVSS 7.5
EPSS 9.0%2019-01-16
CVE-2016-9147
CVE-2016-9147answer_response
High · CVSS 7.5
EPSS 24.8%2017-01-12
CVE-2016-9444
CVE-2016-9444auth_signed
High · CVSS 7.5
EPSS 18.3%2017-01-12
CVE-2016-9131
CVE-2016-9131answer_response
High · CVSS 7.5
EPSS 40.6%2017-01-12
CVE-2016-8864
CVE-2016-8864answer_response is_answertarget_allowed
High · CVSS 7.5
EPSS 38.7%2016-11-02
CVE-2016-2776
CVE-2016-2776
High · CVSS 7.5
EPSS 89.5%2016-09-28

Get an alert for each new debian/bind9 CVE, with the patched functions and AI-written analysis.

Monitor bind9 CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

apache/kylin13 CVEs apache/superset13 CVEs bagisto/bagisto13 CVEs better-auth/better-auth13 CVEs caddyserver/caddy13 CVEs cerebrate-project/cerebrate13 CVEs CoreWCF/CoreWCF13 CVEs craftcms/commerce13 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in debian/bind9.

How many CVEs have a located fix in debian/bind9?: 13 published CVEs have a fix traced to functions in debian/bind9, touching 28 functions across 15 files.
Which function in debian/bind9 has been patched by the most CVEs?: answer_response in lib/dns/resolver.c has been changed by 4 CVE fixes, from 2016 to 2019.
How large is a typical CVE fix in debian/bind9?: The median fix changes 42 lines. 46% of fixes change 20 lines or fewer, and 38% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track debian/bind9 CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing