Skip to content

Vulnerabilities of ISC BIND 9

Is your version affected?

CVE Summary Score Published
CVE-2018-5734 While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR… 7.5 High Jan 16, 2019
CVE-2018-5741 To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to update records in a zone, BIND 9 provides… 6.5 Medium Jan 16, 2019
CVE-2017-3141 The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege… 7.2 High Jan 16, 2019
CVE-2017-3140 If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition… 3.7 Low Jan 16, 2019
CVE-2017-3138 named contains a feature which allows operators to issue commands to a running server by communicating with the server… 6.5 Medium Jan 16, 2019
CVE-2017-3145 BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a… 7.5 High Jan 16, 2019
CVE-2017-3137 Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME… 7.5 High Jan 16, 2019
CVE-2017-3136 A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and… 5.9 Medium Jan 16, 2019
CVE-2017-3143 An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid… 7.5 High Jan 16, 2019
CVE-2017-3135 Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an… 7.5 High Jan 16, 2019
CVE-2017-3142 An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid… 5.3 Medium Jan 16, 2019
CVE-2016-9778 An error in handling certain queries can cause an assertion failure when a server is using the nxdomain-redirect feature… 7.5 High Jan 16, 2019

Other ISC products