Skip to contentIsc vulnerabilities
Newest
- canonical ubuntu linux, isc bind, bind9 +2 more +4 moreA buffer boundary check assertion in rdataset.c can fail incorrectly during zone transferCVE-2020-8618Fix available4.9 Medium
- isc bind, canonical ubuntu linux, debian linux +3 more +5 moreA logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.cCVE-2020-8617Public exploitFix availableEPSS 93.3%7.5 High
- isc bind, debian linux, isc bind9 +2 moreBIND does not sufficiently limit the number of fetches performed when processing referralsCVE-2020-8616Fix availableEPSS 10.9%8.6 High
- fedoraproject fedora, isc bind, bind9 +2 moreTCP-pipelined queries can bypass tcp-clients limitCVE-2019-6477Fix available7.5 High
- isc bind, nic knot resolver, nlnetlabs nsd +1 more +3 moreCache Poisoning issue exists in DNS Response Rate Limiting.CVE-2013-56615.9 Medium
- isc bind, bind9 +1 moreAn oversight while backporting a feature leads to an assertion failure in buffer.c:420CVE-2018-5742Fix available5.9 Medium
- isc bind, bind 9 +1 moreAn error in QNAME minimization code can cause BIND to exit with an assertion failureCVE-2019-6476Fix available5.9 Medium
- isc bind, bind 9 +1 moreA flaw in mirror zone validity checking can allow zone data to be spoofedCVE-2019-6475Fix available5.9 Medium
- isc bind, bind 9 supported preview edition +1 moreBIND Supported Preview Edition can exit with an assertion failure if ECS is in useCVE-2019-64695.9 Medium
- isc keaA packet containing a malformed DUID can cause the kea-dhcp6 server to terminateCVE-2019-6474Fix available5.7 Medium
- ics keaA packet containing a malformed DUID can cause the kea-dhcp6 server to terminateCVE-2019-6473Fix available6.5 Medium
- isc keaA packet containing a malformed DUID can cause the kea-dhcp6 server to terminateCVE-2019-6472Fix available6.5 Medium
- isc bind, bind 9, f5 big-ip access policy manager +15 more +17 moreA race condition when discarding malformed packets can cause BIND to exit with an assertion failureCVE-2019-6471Fix available5.9 Medium
- isc dhcpd, opensuse leap, redhat enterprise linux +16 more +18 moredhcpd: use-after-free error leads crash in IPv6 mode when using mismatched BIND librariesCVE-2019-6470Fix available6.5 Medium
- isc bind, bind 9 supported preview edition +1 moreBIND Supported Preview Edition can exit with an assertion failure if nxdomain-redirect is usedCVE-2019-64685.3 Medium
- isc bind, bind 9 +1 moreAn error in the nxdomain redirect feature can cause BIND to exit with an INSIST assertion failure in query.cCVE-2019-6467Public exploitFix available5.9 Medium
- isc bind, bind 9, f5 big-ip access policy manager +15 more +17 moreLimiting simultaneous TCP clients was ineffectiveCVE-2018-5743Fix available7.5 High
- isc bind, redhat enterprise linux server aus, enterprise linux server eus +1 more +3 moreA denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker...CVE-2017-3139Fix available7.5 High
- isc bind, bind 9, redhat enterprise linux +2 moreZone transfer controls for writable DLZ zones were not effectiveCVE-2019-6465Fix available5.3 Medium
- isc bind, bind 9 +1 moreAn assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keysCVE-2018-5745Fix available4.9 Medium
- isc bind, bind 9 +1 moreA specially crafted packet can cause named to leak memoryCVE-2018-5744Fix available7.5 High
- isc bind, bind 9 +1 moreUpdate policies krb5-subdomain and ms-subdomain do not enforce controls promised in their documentationCVE-2018-5741Fix available6.5 Medium
- isc kea, kea dhcp +1 moreFailure to release memory may exhaust system resourcesCVE-2018-57396.5 Medium
- isc bind, bind 9, netapp cloud backup +1 more +3 moreBIND 9.12's serve-stale implementation can cause an assertion failure in rbtdb.c or other undesirable behavior, even if serve-stale is not enabled.CVE-2018-5737Fix availableEPSS 10.6%5.9 Medium
- isc bind, netapp cloud backup, data ontap edge +2 moreAn error in zone database reference counting can lead to an assertion failure if a server which...CVE-2018-5736Public exploitFix availableEPSS 18.0%5.3 Medium
- isc bind, bind 9, netapp data ontap edge +1 more +3 moreA malformed request can trigger an assertion failure in badcache.cCVE-2018-57347.5 High
- isc bind, bind 9 +1 moreWindows service and uninstall paths are not quoted when BIND is installedCVE-2017-3141Public exploitFix available7.2 High
- isc bind, bind 9, netapp data ontap edge +2 more +4 moreAn error processing RPZ rules can cause named to loop endlessly after handling a queryCVE-2017-3140Fix availableEPSS 12.2%3.7 Low
- isc bind, bind 9, canonical ubuntu linux +9 more +11 moreA flaw in the "deny-answer-aliases" feature can cause an assertion failure in namedCVE-2018-5740Public exploitFix availableEPSS 60.2%7.5 High
- isc bind, bind 9, canonical ubuntu linux +2 moreSome versions of BIND can improperly permit recursive query service to unauthorized clientsCVE-2018-5738Fix availableEPSS 11.4%5.3 Medium
- isc dhcp, canonical ubuntu linux, debian linux +5 more +7 moreA malicious client can overflow a reference counter in ISC dhcpdCVE-2018-5733Fix availableEPSS 20.2%5.9 Medium
- isc dhcpA specially constructed response from a malicious server can cause a buffer overflow in dhclientCVE-2018-5732Fix available7.5 High
- debian bind9, linux +1 moreBackport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858CVE-2018-5735Fix available7.5 High
- isc bind, bind 9, debian linux +8 more +10 moreImproper fetch cleanup sequencing in the resolver can cause named to crashCVE-2017-3145Fix availableEPSS 27.7%7.5 High
- isc bind, bind 9, netapp data ontap edge +1 more +3 moreAn error handling certain queries using the nxdomain-redirect feature could cause a REQUIRE assertion failure in db.cCVE-2016-97787.5 High
- isc dhcp, canonical ubuntu linux, debian linux +6 more +8 moreFailure to properly clean up closed OMAPI connections can exhaust available socketsCVE-2017-3144Fix availableEPSS 72.7%5.3 Medium
- isc bind, bind 9, debian linux +6 more +8 moreAn error in TSIG authentication can permit unauthorized dynamic updatesCVE-2017-3143Public exploitFix availableEPSS 18.2%7.5 High
- isc bind, bind 9, debian linux +6 more +8 moreAn error in TSIG authentication can permit unauthorized zone transfersCVE-2017-3142Fix available5.3 Medium
- isc bind, bind 9, debian linux +3 more +5 morenamed exits with a REQUIRE assertion failure if it receives a null command string on its control channelCVE-2017-3138Fix available6.5 Medium
- isc bind, bind 9, debian linux +9 more +11 moreA response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAMECVE-2017-3137Fix available7.5 High
- isc bind, bind 9, debian linux +9 more +11 moreAn error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"CVE-2017-3136Fix availableEPSS 11.1%5.9 Medium
- isc bind, bind 9, debian linux +8 more +10 moreCombination of DNS64 and RPZ Can Lead to CrashCVE-2017-3135Fix availableEPSS 17.1%7.5 High
- isc bindnamed in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2...CVE-2016-9444Fix availableEPSS 18.1%7.5 High
- isc bindnamed in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a...CVE-2016-9147Fix availableEPSS 24.6%7.5 High
- isc bind, debian linux, netapp data ontap edge +9 more +11 morenamed in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2...CVE-2016-9131Fix availableEPSS 40.6%7.5 High
- isc bind, debian linux, netapp data ontap edge +8 more +10 morenamed in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1...CVE-2016-8864Fix availableEPSS 38.7%7.5 High
- isc bindISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a...CVE-2016-2848Fix availableEPSS 25.8%7.5 High
- isc bind, hp hp-ux, oracle linux +2 more +4 morebuffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11...CVE-2016-2776Public exploitFix availableEPSS 89.5%7.5 High
- isc bind, fedoraproject fedora, hp hp-ux +6 more +8 moreISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or...CVE-2016-2775Fix availableEPSS 63.3%5.9 Medium
- isc bind, redhat enterprise linux +1 moreISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary...CVE-2016-6170Fix availableEPSS 40.9%6.5 Medium
- Show moreLoading…