Isc vulnerabilities

Products

• Bind 198
• Bind 9 87
• Bind9 25
• Dhcp 25
• Inn 14
• Kea 11
• Dhcpd 8
• Dhcp 6
• Bind 9 Supported Preview Edition 2
• Dhcp Client 2
• Stork 2

Newest

• isc bind 9 Specific RPZ configurations and query patterns may result in an unexpected exit CVE-2026-97313 Fix available 7.5 HighOctober 21, 2026
• isc bind 9 Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization CVE-2026-96888 Fix available 7.5 HighOctober 21, 2026
• isc bind 9 Concurrent GSS-TSIG messages corrupt memory CVE-2026-94300 Public exploitFix available 8.1 HighOctober 21, 2026
• isc bind 9 Amplified resource exhaustion in inbound message processing CVE-2026-19630 Fix available 7.5 HighOctober 21, 2026
• isc bind 9 NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets CVE-2026-77119 Fix available 5.9 MediumSeptember 16, 2026
• isc bind 9 Message parser retains every identical singleton RDATA, enabling wire-to-work amplification CVE-2026-75029 Fix available 5.3 MediumSeptember 16, 2026
• isc bind 9 Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching CVE-2026-19668 Fix available 5.3 MediumSeptember 16, 2026
• isc bind 9 Unauthenticated IXFR deltas are applied to the live zone before TSIG verification CVE-2026-19033 Fix available 6.5 MediumSeptember 16, 2026
• isc bind 9 Validating resolver can abort while caching a mismatched NOQNAME proof CVE-2026-80274 Fix available 7.5 HighSeptember 16, 2026
• isc bind 9 named aborts on a TKEY query when the user configuration has no global options statement CVE-2026-76163 Fix available 7.5 HighSeptember 16, 2026
• isc bind 9 Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path CVE-2026-19666 Fix available 7.5 HighSeptember 16, 2026
• isc bind 9 SVCB AliasMode additional-data error leaks qpcache references CVE-2026-81563 Fix available 7.5 HighSeptember 16, 2026
• isc bind 9 Out-of-zone database nodes can become authoritative zone cuts CVE-2026-78301 Fix available 5.8 MediumSeptember 16, 2026
• isc bind 9 Unauthenticated remote crash of named via a single DoH SIG(0) request CVE-2026-77692 Fix available 7.5 HighSeptember 16, 2026
• isc bind 9 checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proof CVE-2026-19941 Fix available 5.9 MediumSeptember 16, 2026
• isc bind 9 qpcache NOQNAME proof use-after-free crashes recursive resolver CVE-2026-19662 Fix available 5.9 MediumSeptember 16, 2026
• isc bind 9 Remote assertion failure via 16-bit length truncation in `dns_ncache_add()` CVE-2026-19667 Fix available 7.5 HighSeptember 16, 2026
• isc bind 9 Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees CVE-2026-81736 Fix available 7.5 HighSeptember 16, 2026
• isc bind, bind 9 +1 more DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field CVE-2026-13321 Fix available 8.6 HighJuly 22, 2026
• isc bind, bind 9 +1 more Unexpected exit in certain situations with NSEC and NSEC3 both present CVE-2026-13204 Fix available 7.5 HighJuly 22, 2026
• isc bind, bind 9 +1 more Record ordering based unexpected exit with CNAME or DNAME CVE-2026-12617 Fix available 7.5 HighJuly 22, 2026
• isc bind, bind 9 +1 more Cache poisoning possible with label count discrepancy, RRSIG, and wildcards CVE-2026-11721 Fix available 7.5 HighJuly 22, 2026
• isc bind, bind 9 +1 more Potential memory usage beyond configured limits CVE-2026-11622 Fix available 7.5 HighJuly 22, 2026
• isc bind, bind 9 +1 more Unnecessary validation of DNSSEC signed records CVE-2026-11605 Fix available 7.5 HighJuly 22, 2026
• isc bind, bind 9 +1 more Potential wildcard CNAME RPZ policy bypass CVE-2026-11331 Fix available 7.5 HighJuly 22, 2026
• isc bind, bind 9 +1 more Key Record using PRIVATEDNS algorithm may lead to unexpected exit CVE-2026-10822 Fix available 6.5 MediumJuly 22, 2026
• isc bind, bind 9 +1 more Incorrect acceptance of NSEC3 records CVE-2026-10723 Fix available 6.8 MediumJuly 22, 2026
• isc bind, bind 9 +1 more Unbounded resend loop in BIND 9 resolver CVE-2026-5950 Public exploitFix available 5.3 MediumMay 20, 2026
• isc bind, bind 9, red hat enterprise linux 10 +6 more +8 more SIG(0) validation during query flood may lead to undefined behavior CVE-2026-5947 Fix available 7.5 HighMay 20, 2026
• isc bind, bind 9, red hat enterprise linux 10 +9 more +11 more Invalid handling of CLASS != IN CVE-2026-5946 Fix available 7.5 HighMay 20, 2026
• isc bind, bind 9, red hat enterprise linux 10 +6 more +8 more Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation CVE-2026-3593 Fix available 7.4 HighMay 20, 2026
• isc bind, bind 9 +1 more Amplification vulnerabilities via self-pointed glue records CVE-2026-3592 Fix available 5.3 MediumMay 20, 2026
• isc bind, bind 9, red hat enterprise linux 10 +9 more +11 more BIND 9 server memory exhaustion during GSS-API TKEY negotiation CVE-2026-3039 Fix available 7.5 HighMay 20, 2026
• isc kea, red hat enterprise linux 10, enterprise linux 10.0 extended update support +2 more Stack overflow in Kea daemons CVE-2026-3608 Fix available 7.5 HighMarch 25, 2026
• isc bind, bind 9 +1 more A stack use-after-return flaw in SIG(0) handling code may enable ACL bypass CVE-2026-3591 Fix available 5.4 MediumMarch 25, 2026
• isc bind, bind 9 +1 more Authenticated query containing a TKEY record may cause named to terminate unexpectedly CVE-2026-3119 Fix available 6.5 MediumMarch 25, 2026
• isc bind, bind 9, red hat enterprise linux 10 +6 more +8 more Memory leak in code preparing DNSSEC proofs of non-existence CVE-2026-3104 Fix available 7.5 HighMarch 25, 2026
• isc bind, bind 9, red hat enterprise linux 10 +25 more +27 more Excessive NSEC3 iterations cause high CPU load during insecure delegation validation CVE-2026-1519 Fix available 7.5 HighMarch 25, 2026
• isc bind 9, red hat enterprise linux 10, enterprise linux 6 +5 more +7 more Malformed BRID/HHIT records can cause named to terminate unexpectedly CVE-2025-13878 Fix available 7.5 HighJanuary 21, 2026
• isc kea Invalid characters cause assert CVE-2025-11232 Fix available 7.5 HighOctober 29, 2025
• isc bind 9 Resource exhaustion via malformed DNSKEY handling CVE-2025-8677 Fix available EPSS 10.7% 7.5 HighOctober 22, 2025
• isc bind 9 Cache poisoning due to weak PRNG CVE-2025-40780 Fix available 8.6 HighOctober 22, 2025
• isc bind 9 Cache poisoning attacks with unsolicited RRs CVE-2025-40778 Public exploitFix available 8.6 HighOctober 22, 2025
• isc stork DoS attack against the Stork UI from an unauthenticated user CVE-2025-8696 7.5 HighSeptember 10, 2025
• isc kea Kea crash upon interaction between specific client options and subnet selection CVE-2025-40779 Fix available 7.5 HighAugust 27, 2025
• isc bind 9 Birthday Attack against Resolvers supporting ECS CVE-2025-40776 Fix available 8.6 HighJuly 16, 2025
• isc bind 9 A possible assertion failure when 'stale-answer-client-timeout' is set to '0' CVE-2025-40777 Fix available 7.5 HighJuly 16, 2025
• isc kea Insecure file permissions can result in confidential information leakage CVE-2025-32803 Fix available 4.0 MediumMay 28, 2025
• isc kea Insecure handling of file paths allows multiple local attacks CVE-2025-32802 Fix available 6.1 MediumMay 28, 2025
• isc kea Loading a malicious hook library can lead to local privilege escalation CVE-2025-32801 Fix available 7.8 HighMay 28, 2025
• Show olderLoading…