Isc

Bind

184 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2015-1349

  • EPSS 11.13%
  • Veröffentlicht 19.02.2015 03:01:22
  • Zuletzt bearbeitet 06.05.2026 22:30:45

named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit, or daemon cra...

5.4

CVE-2014-8680

  • EPSS 2.26%
  • Veröffentlicht 11.12.2014 02:59:05
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service (assertion failure and named exit) via vectors related to (1) the lack of GeoIP databases for both IPv4 and IPv6, or (2) IPv6 support with ...

7.8

CVE-2014-8500

  • EPSS 48.22%
  • Veröffentlicht 11.12.2014 02:59:00
  • Zuletzt bearbeitet 06.05.2026 22:30:45

ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referra...

5

CVE-2014-3859

  • EPSS 29.82%
  • Veröffentlicht 13.06.2014 11:19:57
  • Zuletzt bearbeitet 06.05.2026 22:30:45

libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted packet, as demonstrated by an attack against named, dig, o...

5

CVE-2014-3214

  • EPSS 11.26%
  • Veröffentlicht 09.05.2014 01:55:02
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The prefetch implementation in named in ISC BIND 9.10.0, when a recursive nameserver is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a DNS query that triggers a response with unspecifie...

2.6

CVE-2014-0591

  • EPSS 51.54%
  • Veröffentlicht 14.01.2014 04:29:56
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemo...

6.8

CVE-2013-6230

  • EPSS 1.06%
  • Veröffentlicht 08.11.2013 04:47:23
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The Winsock WSAIoctl API in Microsoft Windows Server 2008, as used in ISC BIND 9.6-ESV before 9.6-ESV-R10-P1, 9.8 before 9.8.6-P1, 9.9 before 9.9.4-P1, 9.9.3-S1, 9.9.4-S1, and other products, does not properly support the SIO_GET_INTERFACE_LIST comma...

7.8

CVE-2013-4854

  • EPSS 51.15%
  • Veröffentlicht 29.07.2013 13:59:37
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertio...

7.8

CVE-2013-3919

  • EPSS 10.29%
  • Veröffentlicht 06.06.2013 13:02:15
  • Zuletzt bearbeitet 29.04.2026 01:13:23

resolver.c in ISC BIND 9.8.5 before 9.8.5-P1, 9.9.3 before 9.9.3-P1, and 9.6-ESV-R9 before 9.6-ESV-R9-P1, when a recursive resolver is configured, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a qu...

7.8

CVE-2013-2266

  • EPSS 44.84%
  • Veröffentlicht 28.03.2013 16:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as...