Browse CVEs

MEDIUM 5.3 CVE-2023-5680 If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name ca… Bind Mitigation only Fix from $1,6002024-02-13 HIGH 7.5 CVE-2022-3488EPSS 19% Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can c… Bind No fix yet Fix from $1,9502023-01-26 HIGH 7.5 CVE-2022-0635 Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually terminate … Bind Mitigation only Fix from $1,9502022-03-23 HIGH 7.5 CVE-2022-0667 When the vulnerability is triggered the BIND process will exit. BIND 9.18.0 Bind No fix yet Fix from $1,9502022-03-22 HIGH 7.5 CVE-2019-6469 An error in the EDNS Client Subnet (ECS) feature for recursive resolvers can cause BIND to exit with an assertion failure when processing a response … Bind Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-6468 In BIND Supported Preview Edition, an error in the nxdomain-redirect feature can occur in versions which support EDNS Client Subnet (ECS) features. I… Bind Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2018-5734EPSS 6% While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has … Bind Mitigation only Fix from $1,9502019-01-16 HIGH 7.5 CVE-2018-5737EPSS 10% A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-ena… Bind Mitigation only Fix from $1,9502019-01-16 HIGH 7.5 CVE-2018-5739 An extension to hooks capabilities which debuted in Kea 1.4.0 introduced a memory leak for operators who are using certain hooks library facilities. … Kea Mitigation only Fix from $1,9502019-01-16 MEDIUM 5.9 CVE-2016-9778EPSS 7% An error in handling certain queries can cause an assertion failure when a server is using the nxdomain-redirect feature to cover a zone for which it… Bind Mitigation only Fix from $1,6002019-01-16 MEDIUM 5.3 CVE-2018-5736EPSS 18% An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts sever… Bind Mitigation only Fix from $1,6002019-01-16 HIGH 7.5 CVE-2016-2848EPSS 26% ISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) v… Bind Mitigation only Fix from $1,9502016-10-21 MEDIUM 6.8 CVE-2016-2088EPSS 23% resolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cookies are enabled, allows remote attackers to cause a denial of service (INSIST a… Bind Mitigation only Fix from $1,6002016-03-09 MEDIUM 5.9 CVE-2016-1284 rdataset.c in ISC BIND 9 Supported Preview Edition 9.9.8-S before 9.9.8-S5, when nxdomain-redirect is enabled, allows remote attackers to cause a den… Bind Mitigation only Fix from $1,6002016-02-04 HIGH 7.0 CVE-2015-8705EPSS 8% buffer.c in named in ISC BIND 9.10.x before 9.10.3-P3, when debug logging is enabled, allows remote attackers to cause a denial of service (REQUIRE a… Bind Mitigation only Fix from $1,9502016-01-20 MEDIUM 6.5 CVE-2015-8704EPSS 20% apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST a… Bind Mitigation only Fix from $1,6002016-01-20 MEDIUM 6.8 CVE-2015-8373 The kea-dhcp4 and kea-dhcp6 servers 0.9.2 and 1.0.0-beta in ISC Kea, when certain debugging settings are used, allow remote attackers to cause a deni… Kea Mitigation only Fix from $1,6002015-12-22 HIGH 7.1 CVE-2015-8461 Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of serv… Bind Mitigation only Fix from $1,9502015-12-16 HIGH 7.8 CVE-2015-4620EPSS 38% name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC vali… Bind Mitigation only Fix from $1,9502015-07-08 MEDIUM 5.4 CVE-2015-1349EPSS 22% named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, a… Bind Mitigation only Fix from $1,6002015-02-19 MEDIUM 5.4 CVE-2014-8680EPSS 9% The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service (assertion failure and named exit) via… Bind Mitigation only Fix from $1,6002014-12-11 MEDIUM 5.0 CVE-2014-3859EPSS 7% libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a denial of service (REQUIRE assert… Bind Mitigation only Fix from $1,6002014-06-13 MEDIUM 5.0 CVE-2014-3214EPSS 17% The prefetch implementation in named in ISC BIND 9.10.0, when a recursive nameserver is enabled, allows remote attackers to cause a denial of service… Bind Mitigation only Fix from $1,6002014-05-09 MEDIUM 6.8 CVE-2013-6230EPSS 6% The Winsock WSAIoctl API in Microsoft Windows Server 2008, as used in ISC BIND 9.6-ESV before 9.6-ESV-R10-P1, 9.8 before 9.8.6-P1, 9.9 before 9.9.4-P… Bind Mitigation only Fix from $1,6002013-11-08 HIGH 7.8 CVE-2013-2266EPSS 43% libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows re… Bind Mitigation only Fix from $1,9502013-03-28 HIGH 7.8 CVE-2012-5166EPSS 34% ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to c… Bind Mitigation only Fix from $1,9502012-10-10 HIGH 7.8 CVE-2012-4244EPSS 37% ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to c… Bind Mitigation only Fix from $1,9502012-09-14 HIGH 7.8 CVE-2012-3817EPSS 27% ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC … Bind Mitigation only Fix from $1,9502012-07-25 MEDIUM 5.7 CVE-2012-3570 Buffer overflow in ISC DHCP 4.2.x before 4.2.4-P1, when DHCPv6 mode is enabled, allows remote attackers to cause a denial of service (segmentation fa… Dhcp Mitigation only Fix from $1,6002012-07-25 HIGH 8.5 CVE-2012-1667EPSS 13% ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle res… Bind Mitigation only Fix from $1,9502012-06-05