Isc Bind 9 vulnerabilities
86 known vulnerabilities affecting isc/bind_9.
Total CVEs
86
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH59MEDIUM25LOW1
Vulnerabilities
Page 5 of 5
CVE-2026-3592P4MEDIUMCVSS 5.3≥ 9.11.0, ≤ 9.16.50≥ 9.18.0, ≤ 9.18.48+5 more2026-05-20
CVE-2026-3592 [MEDIUM] CWE-408 CVE-2026-3592: BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim r
BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resources.
This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9
nvd
CVE-2026-75029P4MEDIUMCVSS 5.3≥ 9.11.0, ≤ 9.18.50≥ 9.20.0, ≤ 9.20.27+3 more2026-09-16
CVE-2026-75029 [MEDIUM] CWE-405 CVE-2026-75029: In a query response, an attacker may send `named` multiple copies of a record that should only exist
In a query response, an attacker may send `named` multiple copies of a record that should only exist once (such as an SOA record). If the RDATA is the same on all the copies, the record is appended to the in-memory RDATA set, which can cause increased memory usage of the negative cache and possibly lead to other memory attack vectors.
This issue aff
nvd
CVE-2026-19668P4MEDIUMCVSS 5.3≥ 9.11.0, ≤ 9.18.50≥ 9.20.0, ≤ 9.20.27+3 more2026-09-16
CVE-2026-19668 [MEDIUM] CWE-407 CVE-2026-19668: A BIND recursive resolver may experience excessive resource consumption if it encounters large numbe
A BIND recursive resolver may experience excessive resource consumption if it encounters large numbers of a particular kind of invalid DNSSEC record. Default limits on "max-records-per-type" and "max-types-per-name" help mitigate the exposure.
This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25,
nvd
CVE-2023-5680P4MEDIUMCVSS 5.3≥ 9.11.3-S1, ≤ 9.11.37-S1≥ 9.16.8-S1, ≤ 9.16.45-S1+1 more2024-02-13
CVE-2023-5680 [MEDIUM] CVE-2023-5680: If a resolver cache has a very large number of ECS records stored for the same name, the process of
If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance.
This issue affects BIND 9 versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.
nvd
CVE-2018-5745P4MEDIUMCVSS 4.9vBIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P1, 9.12.0 -> 9.12.3-P1, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -> 9.13.6 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5745.2019-10-09
CVE-2018-5745 [MEDIUM] CWE-327 CVE-2018-5745: "managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by
"managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses managed-keys to exit due to an assertion failure if, during key rollover, a trust anchor's keys
nvd
CVE-2017-3142P4LOWCVSS 3.7v9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1, 9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S22019-01-16
CVE-2017-3142 [LOW] CWE-20 CVE-2017-3142: An attacker who is able to send and receive messages to an authoritative DNS server and who has know
An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies solely on TSIG keys for protection with no other ACL protection could be manipulated into: providi
nvd
← Previous5 / 5