Skip to contentIsc Bind 9 vulnerabilities
- isc bind, bind 9, netapp active iq unified manager +2 moreCleaning an ECS-enabled cache may cause excessive CPU loadCVE-2023-5680Fix available5.3 Medium
- isc bind, bind 9, netapp active iq unified manager +2 moreSpecific recursive query patterns may lead to an out-of-memory conditionCVE-2023-6516Fix available7.5 High
- isc bind, bind 9, fedoraproject fedora +1 more +3 moreEnabling both DNS64 and serve-stale may cause an assertion failure during recursive resolutionCVE-2023-5679Fix available7.5 High
- isc bind, bind 9, fedoraproject fedora +1 more +3 moreQuerying RFC 1918 reverse zones may cause an assertion failure when "nxdomain-redirect" is enabledCVE-2023-5517Fix available7.5 High
- isc bind, bind 9, fedoraproject fedora +1 more +3 moreParsing large DNS messages may cause excessive CPU loadCVE-2023-4408Fix available7.5 High
- isc bind, bind 9, debian linux +6 more +8 morenamed may terminate unexpectedly under high DNS-over-TLS query loadCVE-2023-4236Fix available7.5 High
- isc bind, bind 9, debian linux +1 more +3 moreA stack exhaustion flaw in control channel code may cause named to terminate unexpectedlyCVE-2023-3341Fix available7.5 High
- isc bind, bind 9, netapp active iq unified manager +5 more +7 moreMalformed NSEC records can cause named to terminate unexpectedly when synth-from-dnssec is enabledCVE-2023-2829Fix available7.5 High
- isc bind, bind 9, debian linux +7 more +9 moreExceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0CVE-2023-2911Fix available7.5 High
- isc bind, bind 9, debian linux +7 more +9 morenamed's configured cache size limit can be significantly exceededCVE-2023-2828Fix available7.5 High
- isc bind, bind 9 +1 morenamed may terminate unexpectedly when processing ECS options in repeated responses to iterative queriesCVE-2022-3488EPSS 19.0%7.5 High
- isc bind, bind 9 +1 morenamed configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quotaCVE-2022-3924Fix availableEPSS 16.0%7.5 High
- isc bind, bind 9 +1 morenamed configured to answer from stale cache may terminate unexpectedly while processing RRSIG queriesCVE-2022-3736Fix availableEPSS 48.4%7.5 High
- isc bind, bind 9 +1 moreAn UPDATE message flood may cause named to exhaust all available memoryCVE-2022-3094Fix availableEPSS 13.2%7.5 High
- isc bind, bind 9 +1 moreAn error in QNAME minimization code can cause BIND to exit with an assertion failureCVE-2019-6476Fix available5.9 Medium
- isc bind, bind 9 +1 moreA flaw in mirror zone validity checking can allow zone data to be spoofedCVE-2019-6475Fix available5.9 Medium
- isc bind, bind 9 supported preview edition +1 moreBIND Supported Preview Edition can exit with an assertion failure if ECS is in useCVE-2019-64695.9 Medium
- isc bind, bind 9, f5 big-ip access policy manager +15 more +17 moreA race condition when discarding malformed packets can cause BIND to exit with an assertion failureCVE-2019-6471Fix available5.9 Medium
- isc bind, bind 9 supported preview edition +1 moreBIND Supported Preview Edition can exit with an assertion failure if nxdomain-redirect is usedCVE-2019-64685.3 Medium
- isc bind, bind 9 +1 moreAn error in the nxdomain redirect feature can cause BIND to exit with an INSIST assertion failure in query.cCVE-2019-6467Public exploitFix available5.9 Medium
- isc bind, bind 9, f5 big-ip access policy manager +15 more +17 moreLimiting simultaneous TCP clients was ineffectiveCVE-2018-5743Fix available7.5 High
- isc bind, bind 9, redhat enterprise linux +2 moreZone transfer controls for writable DLZ zones were not effectiveCVE-2019-6465Fix available5.3 Medium
- isc bind, bind 9 +1 moreAn assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keysCVE-2018-5745Fix available4.9 Medium
- isc bind, bind 9 +1 moreA specially crafted packet can cause named to leak memoryCVE-2018-5744Fix available7.5 High
- isc bind, bind 9 +1 moreUpdate policies krb5-subdomain and ms-subdomain do not enforce controls promised in their documentationCVE-2018-5741Fix available6.5 Medium
- isc bind, bind 9, netapp cloud backup +1 more +3 moreBIND 9.12's serve-stale implementation can cause an assertion failure in rbtdb.c or other undesirable behavior, even if serve-stale is not enabled.CVE-2018-5737Fix availableEPSS 10.6%5.9 Medium
- isc bind, bind 9, netapp data ontap edge +1 more +3 moreA malformed request can trigger an assertion failure in badcache.cCVE-2018-57347.5 High
- isc bind, bind 9 +1 moreWindows service and uninstall paths are not quoted when BIND is installedCVE-2017-3141Public exploitFix available7.2 High
- isc bind, bind 9, netapp data ontap edge +2 more +4 moreAn error processing RPZ rules can cause named to loop endlessly after handling a queryCVE-2017-3140Fix availableEPSS 12.2%3.7 Low
- isc bind, bind 9, canonical ubuntu linux +9 more +11 moreA flaw in the "deny-answer-aliases" feature can cause an assertion failure in namedCVE-2018-5740Public exploitFix availableEPSS 60.2%7.5 High
- isc bind, bind 9, canonical ubuntu linux +2 moreSome versions of BIND can improperly permit recursive query service to unauthorized clientsCVE-2018-5738Fix availableEPSS 11.4%5.3 Medium
- isc bind, bind 9, debian linux +8 more +10 moreImproper fetch cleanup sequencing in the resolver can cause named to crashCVE-2017-3145Fix availableEPSS 27.7%7.5 High
- isc bind, bind 9, netapp data ontap edge +1 more +3 moreAn error handling certain queries using the nxdomain-redirect feature could cause a REQUIRE assertion failure in db.cCVE-2016-97787.5 High
- isc bind, bind 9, debian linux +6 more +8 moreAn error in TSIG authentication can permit unauthorized dynamic updatesCVE-2017-3143Public exploitFix availableEPSS 18.2%7.5 High
- isc bind, bind 9, debian linux +6 more +8 moreAn error in TSIG authentication can permit unauthorized zone transfersCVE-2017-3142Fix available5.3 Medium
- isc bind, bind 9, debian linux +3 more +5 morenamed exits with a REQUIRE assertion failure if it receives a null command string on its control channelCVE-2017-3138Fix available6.5 Medium
- isc bind, bind 9, debian linux +9 more +11 moreA response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAMECVE-2017-3137Fix available7.5 High
- isc bind, bind 9, debian linux +9 more +11 moreAn error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"CVE-2017-3136Fix availableEPSS 11.1%5.9 Medium
- isc bind, bind 9, debian linux +8 more +10 moreCombination of DNS64 and RPZ Can Lead to CrashCVE-2017-3135Fix availableEPSS 17.1%7.5 High