Skip to contentIsc Bind vulnerabilities
- isc bind, bind 9 +1 moreAn error in the nxdomain redirect feature can cause BIND to exit with an INSIST assertion failure in query.cCVE-2019-6467Public exploitFix available5.9 Medium
- isc bind, bind 9, f5 big-ip access policy manager +15 more +17 moreLimiting simultaneous TCP clients was ineffectiveCVE-2018-5743Fix available7.5 High
- isc bind, redhat enterprise linux server aus, enterprise linux server eus +1 more +3 moreA denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker...CVE-2017-3139Fix available7.5 High
- isc bind, bind 9, redhat enterprise linux +2 moreZone transfer controls for writable DLZ zones were not effectiveCVE-2019-6465Fix available5.3 Medium
- isc bind, bind 9 +1 moreAn assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keysCVE-2018-5745Fix available4.9 Medium
- isc bind, bind 9 +1 moreA specially crafted packet can cause named to leak memoryCVE-2018-5744Fix available7.5 High
- isc bind, bind 9 +1 moreUpdate policies krb5-subdomain and ms-subdomain do not enforce controls promised in their documentationCVE-2018-5741Fix available6.5 Medium
- isc bind, bind 9, netapp cloud backup +1 more +3 moreBIND 9.12's serve-stale implementation can cause an assertion failure in rbtdb.c or other undesirable behavior, even if serve-stale is not enabled.CVE-2018-5737Fix availableEPSS 10.6%5.9 Medium
- isc bind, netapp cloud backup, data ontap edge +2 moreAn error in zone database reference counting can lead to an assertion failure if a server which...CVE-2018-5736Public exploitFix availableEPSS 18.0%5.3 Medium
- isc bind, bind 9, netapp data ontap edge +1 more +3 moreA malformed request can trigger an assertion failure in badcache.cCVE-2018-57347.5 High
- isc bind, bind 9 +1 moreWindows service and uninstall paths are not quoted when BIND is installedCVE-2017-3141Public exploitFix available7.2 High
- isc bind, bind 9, netapp data ontap edge +2 more +4 moreAn error processing RPZ rules can cause named to loop endlessly after handling a queryCVE-2017-3140Fix availableEPSS 12.2%3.7 Low
- isc bind, bind 9, canonical ubuntu linux +9 more +11 moreA flaw in the "deny-answer-aliases" feature can cause an assertion failure in namedCVE-2018-5740Public exploitFix availableEPSS 60.2%7.5 High
- isc bind, bind 9, canonical ubuntu linux +2 moreSome versions of BIND can improperly permit recursive query service to unauthorized clientsCVE-2018-5738Fix availableEPSS 11.4%5.3 Medium
- debian bind9, linux +1 moreBackport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858CVE-2018-5735Fix available7.5 High
- isc bind, bind 9, debian linux +8 more +10 moreImproper fetch cleanup sequencing in the resolver can cause named to crashCVE-2017-3145Fix availableEPSS 27.7%7.5 High
- isc bind, bind 9, netapp data ontap edge +1 more +3 moreAn error handling certain queries using the nxdomain-redirect feature could cause a REQUIRE assertion failure in db.cCVE-2016-97787.5 High
- isc bind, bind 9, debian linux +6 more +8 moreAn error in TSIG authentication can permit unauthorized dynamic updatesCVE-2017-3143Public exploitFix availableEPSS 18.2%7.5 High
- isc bind, bind 9, debian linux +6 more +8 moreAn error in TSIG authentication can permit unauthorized zone transfersCVE-2017-3142Fix available5.3 Medium
- isc bind, bind 9, debian linux +3 more +5 morenamed exits with a REQUIRE assertion failure if it receives a null command string on its control channelCVE-2017-3138Fix available6.5 Medium
- isc bind, bind 9, debian linux +9 more +11 moreA response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAMECVE-2017-3137Fix available7.5 High
- isc bind, bind 9, debian linux +9 more +11 moreAn error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"CVE-2017-3136Fix availableEPSS 11.1%5.9 Medium
- isc bind, bind 9, debian linux +8 more +10 moreCombination of DNS64 and RPZ Can Lead to CrashCVE-2017-3135Fix availableEPSS 17.1%7.5 High
- isc bindnamed in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2...CVE-2016-9444Fix availableEPSS 18.1%7.5 High
- isc bindnamed in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a...CVE-2016-9147Fix availableEPSS 24.6%7.5 High
- isc bind, debian linux, netapp data ontap edge +9 more +11 morenamed in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2...CVE-2016-9131Fix availableEPSS 40.6%7.5 High
- isc bind, debian linux, netapp data ontap edge +8 more +10 morenamed in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1...CVE-2016-8864Fix availableEPSS 38.7%7.5 High
- isc bindISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a...CVE-2016-2848Fix availableEPSS 25.8%7.5 High
- isc bind, hp hp-ux, oracle linux +2 more +4 morebuffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11...CVE-2016-2776Public exploitFix availableEPSS 89.5%7.5 High
- isc bind, fedoraproject fedora, hp hp-ux +6 more +8 moreISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or...CVE-2016-2775Fix availableEPSS 63.3%5.9 Medium
- isc bind, redhat enterprise linux +1 moreISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary...CVE-2016-6170Fix availableEPSS 40.9%6.5 Medium
- isc bindresolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cookies are enabled, allows...CVE-2016-2088EPSS 22.7%6.8 Medium
- isc bind, canonical ubuntu linux, debian linux +11 more +13 morenamed in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to...CVE-2016-1286Fix availableEPSS 60.8%8.6 High
- isc bind, canonical ubuntu linux, debian linux +11 more +13 morenamed in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME...CVE-2016-1285Fix availableEPSS 57.8%6.8 Medium
- isc bindrdataset.c in ISC BIND 9 Supported Preview Edition 9.9.8-S before 9.9.8-S5, when nxdomain...CVE-2016-12845.9 Medium
- isc bindbuffer.c in named in ISC BIND 9.10.x before 9.10.3-P3, when debug logging is enabled, allows...CVE-2015-87057.0 High
- isc bindapl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote...CVE-2015-8704Fix availableEPSS 20.7%6.5 Medium
- isc bindRace condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3...CVE-2015-84617.1 High
- isc bind, oracle linux, solaris +1 more +3 moredb.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers...CVE-2015-8000Fix availableEPSS 55.9%5.0 Medium
- isc bind, apple mac os x server +1 moreopenpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows...CVE-2015-5986EPSS 26.9%7.1 High
- isc bind, apple mac os x server +1 morebuffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote...CVE-2015-5722Fix availableEPSS 34.9%7.8 High
- isc bind, apple os x server, canonical ubuntu linux +18 more +20 morenamed in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to...CVE-2015-5477In KEVPublic exploitFix availableEPSS 99.6%7.8 High
- isc bindThe GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a...CVE-2014-86805.4 Medium
- isc bindlibdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote...CVE-2014-38595.0 Medium
- isc bindThe prefetch implementation in named in ISC BIND 9.10.0, when a recursive nameserver is enabled,...CVE-2014-3214EPSS 17.3%5.0 Medium
- isc bindname.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when...CVE-2015-4620Fix availableEPSS 38.8%7.8 High
- isc bindnamed in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC...CVE-2015-1349Fix availableEPSS 22.9%5.4 Medium
- isc bindISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit...CVE-2014-8500Fix availableEPSS 59.0%7.8 High
- isc bindThe query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8...CVE-2014-0591Fix availableEPSS 32.7%2.6 Low
- isc bindThe Winsock WSAIoctl API in Microsoft Windows Server 2008, as used in ISC BIND 9.6-ESV before 9.6...CVE-2013-62306.8 Medium
- Show moreLoading…