Isc

Bind

181 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2012-4244

  • EPSS 56.67%
  • Published 14.09.2012 10:33:21
  • Last modified 11.04.2025 00:51:21

ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a long resource re...

7.8

CVE-2012-3817

  • EPSS 3.99%
  • Published 25.07.2012 10:42:35
  • Last modified 11.04.2025 00:51:21

ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does not properly initialize the failing-query cache, which allows remote atta...

4.3

CVE-2012-3868

  • EPSS 2.18%
  • Published 25.07.2012 10:42:35
  • Last modified 11.04.2025 00:51:21

Race condition in the ns_client structure management in ISC BIND 9.9.x before 9.9.1-P2 allows remote attackers to cause a denial of service (memory consumption or process exit) via a large volume of TCP queries.

8.5

CVE-2012-1667

  • EPSS 41.12%
  • Published 05.06.2012 16:55:01
  • Last modified 11.04.2025 00:51:21

ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of ...

5

CVE-2012-1033

  • EPSS 1.96%
  • Published 08.02.2012 20:55:01
  • Last modified 11.04.2025 00:51:21

The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names...

5

CVE-2011-4313

  • EPSS 23.31%
  • Published 29.11.2011 17:55:02
  • Last modified 11.04.2025 00:51:21

query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named e...

5

CVE-2011-2464

  • EPSS 45.02%
  • Published 08.07.2011 20:55:00
  • Last modified 11.04.2025 00:51:21

Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named daemon crash) via a crafted UPDATE request.

2.6

CVE-2011-2465

  • EPSS 14.01%
  • Published 08.07.2011 20:55:00
  • Last modified 11.04.2025 00:51:21

Unspecified vulnerability in ISC BIND 9 9.8.0, 9.8.0-P1, 9.8.0-P2, and 9.8.1b1, when recursion is enabled and the Response Policy Zone (RPZ) contains DNAME or certain CNAME records, allows remote attackers to cause a denial of service (named daemon c...

5

CVE-2011-1910

  • EPSS 34.01%
  • Published 31.05.2011 20:55:02
  • Last modified 11.04.2025 00:51:21

Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative...

5

CVE-2011-1907

  • EPSS 22.51%
  • Published 09.05.2011 22:55:03
  • Last modified 11.04.2025 00:51:21

ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones (RPZ) RRset replacement is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RRSIG query.