BI
Product
BIND
On CISA KEVExploited in the wild
184
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 62Medium 36Low 1
Watch
Add BIND to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-5734 | 7.5 | Jan 16 | A malformed request can trigger an assertion failure in badcache.c Affected: 9.10.5; 9.10.5; 9.10.6; 9.10.6 |
| CVE-2017-3145 | 7.5 | Jan 16 | Improper fetch cleanup sequencing in the resolver can cause named to crash Affected: 9.4.0 through 9.8.8; 9.9.0 through 9.9.11; 9.10.0 through 9.10.6; 9.11.0 through 9.11.2; 9.9.3; 9.9.11; +6 more |
| CVE-2017-3137 | 7.5 | Jan 16 | A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME Affected: 9.9.9; 9.9.9; 9.9.10; 9.9.10; 9.10.4; 9.10.5; +4 more |
| CVE-2016-9444 | 7.5 | Jan 12 | named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2016-9147 | 7.5 | Jan 12 | named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a response containing… Affected: 9.9.9; 9.9.9; 9.10.4; 9.11.0 |
| CVE-2016-9131 | 7.5 | Jan 12 | named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon… Affected: 9.0 through 9.9.8; 9.10.0 through 9.10.3; 9.9.9; 9.9.9; 9.9.9; 9.9.9; +16 more |
| CVE-2016-8864 | 7.5 | Nov 2 | named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon… Affected: 9.0.0 before 9.9.9; 9.10.0 before 9.10.4; 9.9.9; 9.9.9; 9.9.9; 9.9.9; +16 more |
| CVE-2016-2848 | 7.5 | Oct 21 | ISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via malformed options data in… Affected: 9.1; 9.1.0; 9.1.1; 9.1.1; 9.1.1; 9.1.1; +34 more |
| CVE-2016-2776 | 7.5 | Sep 28 | buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause… Affected: through 9.9.9; 9.10.0; 9.10.0; 9.10.0; 9.10.0; 9.10.0; +34 more |
| CVE-2009-0265 | 7.5 | Jan 26 | Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to… Affected: through 9.6.0 |
| CVE-2006-4095 | 7.5 | Sep 6 | BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which cause an assertion failure when multiple… Affected: through 9.2.6; 9.3.0 through 9.3.2 |
| CVE-2015-8705 | 7.0 | Jan 20 | buffer.c in named in ISC BIND 9.10.x before 9.10.3-P3, when debug logging is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon… Affected: 9.0; 9.0.1; 9.1; 9.1.1; 9.1.2; 9.1.3; +34 more |