BI
Product
BIND
On CISA KEVExploited in the wild
184
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 62Medium 36Low 1
Watch
Add BIND to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-3142 | 3.7 | Jan 16 | An error in TSIG authentication can permit unauthorized zone transfers Affected: 9.4.0 through 9.8.8; 9.9.0 through 9.9.10; 9.10.0 through 9.10.5; 9.11.0 through 9.11.1; 9.9.0; 9.9.3; +5 more |
| CVE-2015-8461 | – | Dec 16 | Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure… Affected: 8.4.7; 9.0; 9.0.1; 9.1; 9.1.1; 9.1.2; +34 more |
| CVE-2015-8000 | – | Dec 16 | db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a… Affected: 8.4.7; 9.0; 9.0.1; 9.1; 9.1.1; 9.1.2; +34 more |
| CVE-2015-5986 | – | Sep 5 | openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon… Affected: through 9.9.7; through 9.10.2 |
| CVE-2015-5722 | – | Sep 5 | buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating… Affected: through 9.9.7; through 9.10.2 |
| CVE-2015-4620 | – | Jul 8 | name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote… Affected: 9.7.0; 9.7.0; 9.7.0; 9.7.0; 9.7.0; 9.7.0; +34 more |
| CVE-2015-1349 | – | Feb 19 | named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to… Affected: 9.7.0; 9.7.0; 9.7.0; 9.7.0; 9.7.0; 9.7.0; +34 more |
| CVE-2014-8680 | – | Dec 11 | The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service (assertion failure and named exit) via vectors related to (1) the… Affected: 9.10.0; 9.10.1 |
| CVE-2014-8500 | – | Dec 11 | ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory… Affected: 9.0; 9.0.1; 9.1; 9.1.1; 9.1.2; 9.1.3; +34 more |
| CVE-2014-3859 | – | Jun 13 | libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit)… Affected: 9.10.0 |
| CVE-2014-3214 | – | May 9 | The prefetch implementation in named in ISC BIND 9.10.0, when a recursive nameserver is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure… Affected: 9.10.0 |
| CVE-2014-0591 | – | Jan 14 | The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote… Affected: 9.6; 9.6; 9.6; 9.6; 9.6; 9.6; +34 more |
| CVE-2013-6230 | – | Nov 8 | The Winsock WSAIoctl API in Microsoft Windows Server 2008, as used in ISC BIND 9.6-ESV before 9.6-ESV-R10-P1, 9.8 before 9.8.6-P1, 9.9 before 9.9.4-P1, 9.9.3-S1, 9.9.4-S1, and… Affected: 9.6; 9.6; 9.6; 9.6; 9.6; 9.6; +34 more |
| CVE-2013-4854 | – | Jul 29 | The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and… Affected: 9.7.0; 9.7.0; 9.7.0; 9.7.0; 9.7.0; 9.7.0; +34 more |
| CVE-2013-3919 | – | Jun 6 | resolver.c in ISC BIND 9.8.5 before 9.8.5-P1, 9.9.3 before 9.9.3-P1, and 9.6-ESV-R9 before 9.6-ESV-R9-P1, when a recursive resolver is configured, allows remote attackers to cause… Affected: 9.6; 9.8.5; 9.9.3 |
| CVE-2013-2266 | – | Mar 28 | libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a… Affected: 9.9.0; 9.9.0; 9.9.0; 9.9.0; 9.9.0; 9.9.0; +34 more |
| CVE-2012-5689 | – | Jan 25 | ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote… Affected: 9.9.0; 9.9.0; 9.9.0; 9.9.0; 9.9.0; 9.9.0; +28 more |
| CVE-2012-5688 | – | Dec 6 | ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a… Affected: 9.8.0; 9.8.0; 9.8.0; 9.8.0; 9.8.0; 9.8.0; +31 more |
| CVE-2012-5166 | – | Oct 10 | ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2012-4244 | – | Sep 14 | ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to cause a denial of service… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2012-3868 | – | Jul 25 | Race condition in the ns_client structure management in ISC BIND 9.9.x before 9.9.1-P2 allows remote attackers to cause a denial of service (memory consumption or process exit)… Affected: 9.9.0; 9.9.0; 9.9.0; 9.9.0; 9.9.0; 9.9.0; +6 more |
| CVE-2012-3817 | – | Jul 25 | ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does… Affected: 9.4; 9.4.0; 9.4.0; 9.4.1; 9.4.2; 9.4.3; +34 more |
| CVE-2012-1667 | – | Jun 5 | ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2012-1033 | – | Feb 8 | The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows… Affected: 9.0; 9.0.1; 9.1; 9.1.1; 9.1.2; 9.1.3; +34 more |
| CVE-2011-4313 | – | Nov 29 | query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2011-2465 | – | Jul 8 | Unspecified vulnerability in ISC BIND 9 9.8.0, 9.8.0-P1, 9.8.0-P2, and 9.8.1b1, when recursion is enabled and the Response Policy Zone (RPZ) contains DNAME or certain CNAME… Affected: 9.8.0; 9.8.0; 9.8.0; 9.8.1 |
| CVE-2011-2464 | – | Jul 8 | Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named… Affected: 9.6; 9.6.0; 9.6.0; 9.6.0; 9.6.0; 9.6.1; +34 more |
| CVE-2011-1910 | – | May 31 | Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2011-1907 | – | May 9 | ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon… Affected: 9.8.0 |
| CVE-2011-0414 | – | Feb 23 | ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cause a denial of service (deadlock and daemon hang) by sending a query at… Affected: 9.7.1; 9.7.1; 9.7.1; 9.7.1; 9.7.2; 9.7.2; +3 more |
| CVE-2010-3614 | – | Dec 3 | named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2010-3615 | – | Dec 3 | named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via… Affected: 9.7.2 |
| CVE-2010-3613 | – | Dec 3 | named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and… Affected: 9.6; 9.6; 9.6; 9.6.2; 9.6.2; 9.6.2; +20 more |
| CVE-2010-3762 | – | Oct 5 | ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote… Affected: through 9.7.2 |
| CVE-2010-0218 | – | Oct 5 | ISC BIND 9.7.2 through 9.7.2-P1 uses an incorrect ACL to restrict the ability of Recursion Desired (RD) queries to access the cache, which allows remote attackers to obtain… Affected: 9.7.2; 9.7.2 |
| CVE-2010-0213 | – | Jul 28 | BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to… Affected: 9.7.1; 9.7.1 |
| CVE-2010-0382 | – | Jan 22 | ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2010-0290 | – | Jan 22 | Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2010-0097 | – | Jan 22 | ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC (1) NSEC and (2) NSEC3 records, which… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2009-4022 | – | Nov 25 | Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2009-0696 | – | Jul 29 | The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote… Affected: 9.4; 9.4.0; 9.4.0; 9.4.0; 9.4.0; 9.4.0; +34 more |
| CVE-2009-0025 | – | Jan 7 | BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2008-4163 | – | Sep 22 | Unspecified vulnerability in ISC BIND 9.3.5-P2-W1, 9.4.2-P2-W1, and 9.5.0-P2-W1 on Windows allows remote attackers to cause a denial of service (UDP client handler termination)… Affected: 9.3.5; 9.4.2; 9.5.0 |
| CVE-2008-0122 | – | Jan 16 | Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers… Affected: through 9.4.2 |
| CVE-2007-2930 | – | Sep 12 | The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as… Affected: through 8.4.7 |
| CVE-2007-2926 | – | Jul 24 | ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name… Affected: 9.0; 9.1; 9.2; 9.3; 9.4; 9.5; +1 more |
| CVE-2007-2925 | – | Jul 24 | The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows remote… Affected: 9.4.0; 9.4.1; 9.5.0 |
| CVE-2007-2241 | – | May 2 | Unspecified vulnerability in query.c in ISC BIND 9.4.0, and 9.5.0a1 through 9.5.0a3, when recursion is enabled, allows remote attackers to cause a denial of service (daemon exit)… Affected: 9.4.0; 9.5.0 |
| CVE-2007-0494 | – | Jan 25 | ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2007-0493 | – | Jan 25 | Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause… Affected: 9.3.0; 9.3.1; 9.3.2; 9.4.0; 9.4.0; 9.5.0 |