Skip to content

Known vulnerabilities in ISC BIND

Is your version affected?

CVE Summary Score Published
CVE-2024-4076 Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result… 7.5 High Jul 23, 2024
CVE-2024-1975 If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from… 7.5 High Jul 23, 2024
CVE-2024-1737 Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any… 7.5 High Jul 23, 2024
CVE-2024-0760 A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the… 7.5 High Jul 23, 2024
CVE-2023-6516 To keep its cache database efficient, `named` running as a recursive resolver occasionally attempts to clean up the… 7.5 High Feb 13, 2024
CVE-2022-3080 By sending specific queries to the resolver, an attacker can cause named to crash 7.5 High Sep 21, 2022
CVE-2022-2795 By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's… 5.3 Medium Sep 21, 2022
CVE-2021-25220 BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1… 6.8 Medium Mar 23, 2022
CVE-2022-0635 Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named… 7.5 High Mar 23, 2022
CVE-2022-0396 BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition 5.3 Medium Mar 23, 2022
CVE-2022-0667 When the vulnerability is triggered the BIND process will exit 7.5 High Mar 22, 2022

Other ISC products