B9
Product
BIND 9
56
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 1High 33Medium 21Low 1
Watch
Add BIND 9 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-75029 | 5.3 | Sep 16 | Message parser retains every identical singleton RDATA, enabling wire-to-work amplification Affected: 9.11.0 through 9.18.50; 9.20.0 through 9.20.27; 9.21.0 through 9.21.25; 9.11.3-S1 through 9.18.50-S1; 9.20.9-S1 through 9.20.27-S1 |
| CVE-2026-19668 | 5.3 | Sep 16 | Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching Affected: 9.11.0 through 9.18.50; 9.20.0 through 9.20.27; 9.21.0 through 9.21.25; 9.11.3-S1 through 9.18.50-S1; 9.20.9-S1 through 9.20.27-S1 |
| CVE-2026-5950 | 5.3 | May 20 | Unbounded resend loop in BIND 9 resolver Affected: 9.18.36 through 9.18.48; 9.20.8 through 9.20.22; 9.21.7 through 9.21.21; 9.18.36-S1 through 9.18.48-S1; 9.20.9-S1 through 9.20.22-S1 |
| CVE-2026-3592 | 5.3 | May 20 | Amplification vulnerabilities via self-pointed glue records Affected: 9.11.0 through 9.16.50; 9.18.0 through 9.18.48; 9.20.0 through 9.20.22; 9.21.0 through 9.21.21; 9.11.3-S1 through 9.16.50-S1; 9.18.11-S1 through 9.18.48-S1; +1 more |
| CVE-2017-3138 | 5.3 | Jan 16 | named exits with a REQUIRE assertion failure if it receives a null command string on its control channel Affected: 9.9.9->9.9.9-P7, 9.9.10b1->9.9.10rc2, 9.10.4->9.10.4-P7, 9.10.5b1->9.10.5rc2, 9.11.0->9.11.0-P4, 9.11.1b1->9.11.1rc2, 9.9.9-S1->9.9.9-S9 |
| CVE-2017-3142 | 3.7 | Jan 16 | An error in TSIG authentication can permit unauthorized zone transfers Affected: 9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1, 9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S2 |