BI
Product
BIND
On CISA KEVExploited in the wild
188
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 66Medium 36Low 1
Watch
Add BIND to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8619 | 4.9 | Jun 17 | In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1: Unless a nameserver is… Affected: 9.11.14 through 9.11.19; 9.11.14-s1 through 9.11.19-s1; 9.14.9 through 9.14.12; 9.16.0 through 9.16.3 |
| CVE-2020-8618 | 4.9 | Jun 17 | An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone,… Affected: 9.16.0 through 9.16.3 |
| CVE-2018-5745 | 4.9 | Oct 9 | "managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation Affected: 9.9.0 through 9.10.7; 9.11.0 through 9.11.4; 9.12.0 through 9.12.2; 9.13.0 through 9.13.6; 9.9.3; 9.10.7; +6 more |
| CVE-2020-8624 | 4.3 | Aug 21 | In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9… Affected: 9.9.12 through 9.9.13; 9.10.7 through 9.10.8; 9.11.3 through 9.11.21; 9.12.1 through 9.16.5; 9.17.0 through 9.17.3; 9.9.12; +3 more |
| CVE-2017-3142 | 3.7 | Jan 16 | An error in TSIG authentication can permit unauthorized zone transfers Affected: 9.4.0 through 9.8.8; 9.9.0 through 9.9.10; 9.10.0 through 9.10.5; 9.11.0 through 9.11.1; 9.9.0; 9.9.3; +5 more |
| CVE-2015-8461 | – | Dec 16 | Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure… Affected: 8.4.7; 9.0; 9.0.1; 9.1; 9.1.1; 9.1.2; +34 more |
| CVE-2015-8000 | – | Dec 16 | db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a… Affected: 8.4.7; 9.0; 9.0.1; 9.1; 9.1.1; 9.1.2; +34 more |
| CVE-2015-5986 | – | Sep 5 | openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon… Affected: through 9.9.7; through 9.10.2 |
| CVE-2015-5722 | – | Sep 5 | buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating… Affected: through 9.9.7; through 9.10.2 |
| CVE-2015-4620 | – | Jul 8 | name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote… Affected: 9.7.0; 9.7.0; 9.7.0; 9.7.0; 9.7.0; 9.7.0; +34 more |
| CVE-2015-1349 | – | Feb 19 | named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to… Affected: 9.7.0; 9.7.0; 9.7.0; 9.7.0; 9.7.0; 9.7.0; +34 more |
| CVE-2014-8680 | – | Dec 11 | The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service (assertion failure and named exit) via vectors related to (1) the… Affected: 9.10.0; 9.10.1 |
| CVE-2014-8500 | – | Dec 11 | ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory… Affected: 9.0; 9.0.1; 9.1; 9.1.1; 9.1.2; 9.1.3; +34 more |
| CVE-2014-3859 | – | Jun 13 | libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit)… Affected: 9.10.0 |
| CVE-2014-3214 | – | May 9 | The prefetch implementation in named in ISC BIND 9.10.0, when a recursive nameserver is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure… Affected: 9.10.0 |
| CVE-2014-0591 | – | Jan 14 | The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote… Affected: 9.6; 9.6; 9.6; 9.6; 9.6; 9.6; +34 more |
| CVE-2013-6230 | – | Nov 8 | The Winsock WSAIoctl API in Microsoft Windows Server 2008, as used in ISC BIND 9.6-ESV before 9.6-ESV-R10-P1, 9.8 before 9.8.6-P1, 9.9 before 9.9.4-P1, 9.9.3-S1, 9.9.4-S1, and… Affected: 9.6; 9.6; 9.6; 9.6; 9.6; 9.6; +34 more |
| CVE-2013-4854 | – | Jul 29 | The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and… Affected: 9.7.0; 9.7.0; 9.7.0; 9.7.0; 9.7.0; 9.7.0; +34 more |
| CVE-2013-3919 | – | Jun 6 | resolver.c in ISC BIND 9.8.5 before 9.8.5-P1, 9.9.3 before 9.9.3-P1, and 9.6-ESV-R9 before 9.6-ESV-R9-P1, when a recursive resolver is configured, allows remote attackers to cause… Affected: 9.6; 9.8.5; 9.9.3 |
| CVE-2013-2266 | – | Mar 28 | libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a… Affected: 9.9.0; 9.9.0; 9.9.0; 9.9.0; 9.9.0; 9.9.0; +34 more |
| CVE-2012-5689 | – | Jan 25 | ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote… Affected: 9.9.0; 9.9.0; 9.9.0; 9.9.0; 9.9.0; 9.9.0; +28 more |
| CVE-2012-5688 | – | Dec 6 | ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a… Affected: 9.8.0; 9.8.0; 9.8.0; 9.8.0; 9.8.0; 9.8.0; +31 more |
| CVE-2012-5166 | – | Oct 10 | ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2012-4244 | – | Sep 14 | ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to cause a denial of service… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2012-3868 | – | Jul 25 | Race condition in the ns_client structure management in ISC BIND 9.9.x before 9.9.1-P2 allows remote attackers to cause a denial of service (memory consumption or process exit)… Affected: 9.9.0; 9.9.0; 9.9.0; 9.9.0; 9.9.0; 9.9.0; +6 more |
| CVE-2012-3817 | – | Jul 25 | ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does… Affected: 9.4; 9.4.0; 9.4.0; 9.4.1; 9.4.2; 9.4.3; +34 more |
| CVE-2012-1667 | – | Jun 5 | ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2012-1033 | – | Feb 8 | The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows… Affected: 9.0; 9.0.1; 9.1; 9.1.1; 9.1.2; 9.1.3; +34 more |
| CVE-2011-4313 | – | Nov 29 | query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2011-2465 | – | Jul 8 | Unspecified vulnerability in ISC BIND 9 9.8.0, 9.8.0-P1, 9.8.0-P2, and 9.8.1b1, when recursion is enabled and the Response Policy Zone (RPZ) contains DNAME or certain CNAME… Affected: 9.8.0; 9.8.0; 9.8.0; 9.8.1 |
| CVE-2011-2464 | – | Jul 8 | Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named… Affected: 9.6; 9.6.0; 9.6.0; 9.6.0; 9.6.0; 9.6.1; +34 more |
| CVE-2011-1910 | – | May 31 | Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2011-1907 | – | May 9 | ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon… Affected: 9.8.0 |
| CVE-2011-0414 | – | Feb 23 | ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cause a denial of service (deadlock and daemon hang) by sending a query at… Affected: 9.7.1; 9.7.1; 9.7.1; 9.7.1; 9.7.2; 9.7.2; +3 more |
| CVE-2010-3613 | – | Dec 3 | named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and… Affected: 9.6; 9.6; 9.6; 9.6.2; 9.6.2; 9.6.2; +20 more |
| CVE-2010-3614 | – | Dec 3 | named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2010-3615 | – | Dec 3 | named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via… Affected: 9.7.2 |
| CVE-2010-3762 | – | Oct 5 | ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote… Affected: through 9.7.2 |
| CVE-2010-0218 | – | Oct 5 | ISC BIND 9.7.2 through 9.7.2-P1 uses an incorrect ACL to restrict the ability of Recursion Desired (RD) queries to access the cache, which allows remote attackers to obtain… Affected: 9.7.2; 9.7.2 |
| CVE-2010-0213 | – | Jul 28 | BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to… Affected: 9.7.1; 9.7.1 |
| CVE-2010-0382 | – | Jan 22 | ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2010-0290 | – | Jan 22 | Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2010-0097 | – | Jan 22 | ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC (1) NSEC and (2) NSEC3 records, which… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2009-4022 | – | Nov 25 | Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2009-0696 | – | Jul 29 | The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote… Affected: 9.4; 9.4.0; 9.4.0; 9.4.0; 9.4.0; 9.4.0; +34 more |
| CVE-2009-0025 | – | Jan 7 | BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of… Affected: 9.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; 9.0.0; +34 more |
| CVE-2008-4163 | – | Sep 22 | Unspecified vulnerability in ISC BIND 9.3.5-P2-W1, 9.4.2-P2-W1, and 9.5.0-P2-W1 on Windows allows remote attackers to cause a denial of service (UDP client handler termination)… Affected: 9.3.5; 9.4.2; 9.5.0 |
| CVE-2008-0122 | – | Jan 16 | Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers… Affected: through 9.4.2 |
| CVE-2007-2930 | – | Sep 12 | The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as… Affected: through 8.4.7 |
| CVE-2007-2925 | – | Jul 24 | The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows remote… Affected: 9.4.0; 9.4.1; 9.5.0 |