| CVE-2022-3080 |
By sending specific queries to the resolver, an attacker can cause named to crash
|
7.5
High
|
Sep 21, 2022 |
| CVE-2022-38178 |
By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small…
|
7.5
High
|
Sep 21, 2022 |
| CVE-2022-38177 |
By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small…
|
7.5
High
|
Sep 21, 2022 |
| CVE-2022-2906 |
An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of…
|
7.5
High
|
Sep 21, 2022 |
| CVE-2022-2881 |
The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the…
|
5.5
Medium
|
Sep 21, 2022 |
| CVE-2022-2795 |
By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's…
|
5.3
Medium
|
Sep 21, 2022 |
| CVE-2022-1183 |
On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure
|
7.5
High
|
May 19, 2022 |
| CVE-2021-25219 |
In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND…
|
5.3
Medium
|
Oct 27, 2021 |
| CVE-2021-25218 |
In BIND 9.16.19, 9.17.16
|
7.5
High
|
Aug 18, 2021 |
| CVE-2021-25216 |
In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of…
|
8.1
High
|
Apr 29, 2021 |
| CVE-2021-25215 |
In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of…
|
7.5
High
|
Apr 29, 2021 |
| CVE-2021-25214 |
In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 ->…
|
6.5
Medium
|
Apr 29, 2021 |
| CVE-2020-8625 |
BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features
|
8.1
High
|
Feb 17, 2021 |
| CVE-2020-8624 |
In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects…
|
4.3
Medium
|
Aug 21, 2020 |
| CVE-2020-8623 |
In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9…
|
7.5
High
|
Aug 21, 2020 |
| CVE-2020-8622 |
In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9…
|
6.5
Medium
|
Aug 21, 2020 |
| CVE-2020-8621 |
In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first'…
|
7.5
High
|
Aug 21, 2020 |
| CVE-2020-8620 |
In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data…
|
7.5
High
|
Aug 21, 2020 |
| CVE-2020-8619 |
In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview…
|
4.9
Medium
|
Jun 17, 2020 |
| CVE-2020-8618 |
An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger…
|
4.9
Medium
|
Jun 17, 2020 |
| CVE-2020-8617 |
Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the…
|
7.5
High
|
May 19, 2020 |
| CVE-2020-8616 |
A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when…
|
8.6
High
|
May 19, 2020 |
| CVE-2019-6477 |
With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query…
|
7.5
High
|
Nov 26, 2019 |