ISC BIND9 vulnerabilities

CVEs per yearBy the year they were published

1. 20191
2. 20209
3. 20216
4. 20227

Newest CVEs

• CVE-2022-3080

  BIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedly

  ISC · BIND9

  High7.5
• CVE-2022-38178

  Memory leaks in EdDSA DNSSEC verification code

  ISC · BIND9

  High7.5
• CVE-2022-38177

  Memory leak in ECDSA DNSSEC verification code

  ISC · BIND9

  High7.5
• CVE-2022-2906

  Memory leaks in code handling Diffie-Hellman key exchange via TKEY RRs (OpenSSL 3.0.0+ only)

  ISC · BIND9

  High7.5
• CVE-2022-2881

  Buffer overread in statistics channel code

  ISC · BIND9

  Medium5.5
• CVE-2022-2795

  Processing large delegations may severely degrade resolver performance

  ISC · BIND9

  Medium5.3
• CVE-2022-1183

  Destroying a TLS session early causes assertion failure

  ISC · BIND9

  High7.5
• CVE-2021-25219

  Lame cache can be abused to severely degrade resolver performance

  ISC · BIND9

  Medium5.3
• CVE-2021-25218

  A too-strict assertion check could be triggered when responses in BIND 9.16.19 and 9.17.16 require UDP fragmentation if RRL is in use

  ISC · BIND9

  High7.5
• CVE-2021-25216

  A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack

  ISC · BIND9

  High8.1