Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 280

Export CSV
CVE-2016-2088

bind: malformed packet containing multiple cookie options can trigger assertion failure

resolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cookies are enabled, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed packet with more than one cookie option.

CVSS 3.0 · 6.8 Medium EPSS 22.7% KEV · Not listed
Vendors
Isc
Products
Bind
CVE-2016-2774

dhcp: unclosed TCP connections to OMAPI or failover ports can cause DoS

ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of service (INSIST assertion failure or request-processing outage) by establishing many sessions.

CVSS 3.1 · 5.9 Medium EPSS 73.6% KEV · Not listed
Vendors
Canonical Debian Isc and 1 more
Products
Ubuntu Linux Debian Linux Dhcp and 1 more
CVE-2016-2775

bind: Too long query name causes segmentation fault in lwresd

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.

CVSS 3.1 · 5.9 Medium EPSS 63.3% KEV · Not listed
Vendors
Fedoraproject Hp Isc and 1 more
Products
Fedora Hp-ux Bind and 8 more
CVE-2016-2776

bind: assertion failure in buffer.c while building responses to a specifically constructed request

buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.

CVSS 3.0 · 7.5 High EPSS 89.5% KEV · Not listed
Vendors
Hp Isc Oracle and 1 more
Products
Hp-ux Bind Linux and 7 more
CVE-2016-2848

bind: assertion failure triggered by a packet with malformed options

ISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via malformed options data in an OPT resource record.

CVSS 3.0 · 7.5 High EPSS 25.8% KEV · Not listed
Vendors
Isc Redhat
Products
Bind Enterprise Linux Rhel Aus and 3 more
CVE-2016-8864

bind: assertion failure while handling responses containing a DNAME answer

named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.

CVSS 3.1 · 7.5 High EPSS 38.7% KEV · Not listed
Vendors
Debian Isc Netapp and 1 more
Products
Debian Linux Bind Data Ontap Edge and 13 more
CVE-2019-6470

dhcpd: use-after-free error leads crash in IPv6 mode when using mismatched BIND libraries

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised to consult their vendor documentation.

CVSS 3.1 · 6.5 Medium EPSS 8.8% KEV · Not listed
Vendors
Isc Opensuse Redhat
Products
Dhcpd Leap Enterprise Linux and 16 more
CVE-2014-0591

bind: named crash when handling malformed NSEC3-signed zones

The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature.

CVSS 2.0 · 2.6 Low EPSS 32.7% KEV · Not listed
Vendors
Isc Redhat
Products
Bind Enterprise Linux
CVE-2013-6230

bind: localnets ACL bypass caused by WinSock API bug

The Winsock WSAIoctl API in Microsoft Windows Server 2008, as used in ISC BIND 9.6-ESV before 9.6-ESV-R10-P1, 9.8 before 9.8.6-P1, 9.9 before 9.9.4-P1, 9.9.3-S1, 9.9.4-S1, and other products, does not properly support the SIO_GET_INTERFACE_LIST command for netmask 255.255.255.255, which allows remote attackers to bypass intended IP address restrictions by leveraging misinterpretation of this netmask as a 0.0.0.0 netmask.

CVSS 2.0 · 6.8 Medium EPSS 5.7% KEV · Not listed
Vendors
Isc
Products
Bind
CVE-2013-4854

bind: named crash with an assertion failure on parsing malformed rdata

The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.

CVSS 2.0 · 7.8 High EPSS 34.2% KEV · Not listed
Vendors
Fedoraproject Freebsd Hp and 7 more
Products
Fedora Freebsd Hp-ux and 9 more
CVE-2013-3919

bind: Querying a recursive resolver for a malformed zone causes named to crash

resolver.c in ISC BIND 9.8.5 before 9.8.5-P1, 9.9.3 before 9.9.3-P1, and 9.6-ESV-R9 before 9.6-ESV-R9-P1, when a recursive resolver is configured, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a record in a malformed zone.

CVSS 2.0 · 7.8 High EPSS 5.1% KEV · Not listed
Vendors
Isc
Products
Bind
CVE-2013-2494

dhcp: bind/libdns CVE-2013-2266 regular expressions excessive resource consumption DoS

libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a denial of service (memory consumption) via vectors involving a regular expression, as demonstrated by a memory-exhaustion attack against a machine running a dhcpd process, a related issue to CVE-2013-2266.

CVSS 2.0 · 4.9 Medium EPSS 1.2% KEV · Not listed
Vendors
Isc
Products
Dhcp
CVE-2013-2266

bind: libdns regular expressions excessive resource consumption DoS

libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.

CVSS 2.0 · 7.8 High EPSS 42.9% KEV · Not listed
Vendors
Isc Redhat
Products
Bind Enterprise Linux
CVE-2012-5689

bind: denial of service when processing queries and with both DNS64 and RPZ enabled

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.

CVSS 2.0 · 7.1 High EPSS 12.1% KEV · Not listed
Vendors
Canonical Isc Redhat
Products
Ubuntu Linux Bind Enterprise Linux and 6 more
CVE-2012-5688

bind: DoS on servers using DNS64

ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.

CVSS 2.0 · 7.8 High EPSS 10.9% KEV · Not listed
Vendors
Canonical Isc Redhat
Products
Ubuntu Linux Bind Enterprise Linux
CVE-2012-5166

bind: Specially crafted DNS data can cause a lockup in named

ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service (named daemon hang) via unspecified combinations of resource records.

CVSS 2.0 · 7.8 High EPSS 32.7% KEV · Not listed
Vendors
Isc Redhat
Products
Bind Enterprise Linux Rhel Els
CVE-2012-4244

bind: specially crafted resource record causes named to exit

ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a long resource record.

CVSS 2.0 · 7.8 High EPSS 35.2% KEV · Not listed
Vendors
Isc Redhat
Products
Bind Enterprise Linux Rhel Els
CVE-2012-3955

dhcp: reduced expiration time of an IPv6 lease may cause dhcpd to crash

ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced.

CVSS 2.0 · 7.1 High EPSS 21.7% KEV · Not listed
Vendors
Canonical Debian Isc and 1 more
Products
Ubuntu Linux Debian Linux Dhcp and 1 more
CVE-2012-3954

dhcp: two memory leaks may result in DoS

Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of service (memory consumption) by sending many requests.

CVSS 2.0 · 3.3 Low EPSS 4.3% KEV · Not listed
Vendors
Canonical Debian Isc and 1 more
Products
Ubuntu Linux Debian Linux Dhcp and 1 more
CVE-2012-3868

bind: high TCP query load can trigger memory leak

Race condition in the ns_client structure management in ISC BIND 9.9.x before 9.9.1-P2 allows remote attackers to cause a denial of service (memory consumption or process exit) via a large volume of TCP queries.

CVSS 2.0 · 4.3 Medium EPSS 2.7% KEV · Not listed
Vendors
Isc
Products
Bind