Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

isc bind 9.11.0 vulnerabilities and exploits

(subscribe to this query)
385
VMScore
CVE-2016-9778
An error in handling certain queries can cause an assertion failure when a server is using the nxdomain-redirect feature to cover a zone for which it is also providing authoritative service. A vulnerable server could be intentionally stopped by an attacker if it was using a confi...
Isc Bind 9.9.8Isc Bind 9.9.9Isc Bind 9.11.0Netapp Solidfire Element Os Management Node -Netapp Data Ontap Edge -
314
VMScore
CVE-2017-3138
named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regression introduced in a recent feature change has created a situation under which some...
Isc Bind 9.11.1Isc Bind 9.11.0Isc Bind 9.10.4Isc Bind 9.9.10Isc Bind 9.10.5Isc Bind 9.9.9Netapp Data Ontap Edge -Netapp Oncommand Balance -Netapp Element Software -Debian Debian Linux 8.0
725
VMScore
CVE-2017-3141
The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege escalation if the host file system permissions allow this. Affects BIND 9.2.6-P2->9.2.9, 9.3.2-P1->9.3.6, 9.4.0->9.8.8, 9.9.0->9.9.10, 9.10.0->9.10.5, 9.1...
Isc BindIsc Bind 9.3.2Isc Bind 9.2.6
314
VMScore
CVE-2018-5745
"managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses managed-keys...
Isc BindIsc Bind 9.10.7Isc Bind 9.11.5Isc Bind 9.9.3Isc Bind 9.12.3Isc Bind 9.10.8
385
VMScore
CVE-2019-6465
Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P2, 9.12.0 -> 9.12.3-P2, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported Preview ...
Isc BindIsc Bind 9.9.3Isc Bind 9.10.8Isc Bind 9.11.5Isc Bind 9.12.3Redhat Enterprise Linux 8.0
447
VMScore
CVE-2019-6477
With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query received via UDP or via TCP without pipelining enabled. A client using a TCP-pipelined connection to a server could consume more resources than the server has been pr...
Isc Bind 9.12.4Isc BindIsc Bind 9.11.6Isc Bind 9.11.5Isc Bind 9.11.12Fedoraproject Fedora 30Fedoraproject Fedora 31
385
VMScore
CVE-2017-3140
If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5, 9.11.0->9.11.1, 9.9.10-S1, 9.10.5-S1.
Isc Bind 9.9.10Isc Bind 9.10.5Isc BindNetapp Oncommand Balance -Netapp Element Software -Netapp Data Ontap Edge -
384
VMScore
CVE-2018-5743
By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which was intended to limit...
F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 15.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 15.0.0F5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 15.0.0F5 Big-ip AnalyticsF5 Big-ip Analytics 15.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 15.0.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 15.0.0F5 Big-ip Edge GatewayF5 Big-ip Edge Gateway 15.0.0F5 Big-ip Fraud Protection ServiceF5 Big-ip Fraud Protection Service 15.0.0F5 Big-ip Global Traffic ManagerF5 Big-ip Global Traffic Manager 15.0.0F5 Big-ip Link ControllerF5 Big-ip Link Controller 15.0.0F5 Big-ip WebacceleratorF5 Big-ip Webaccelerator 15.0.0
NA
CVE-2023-2828
Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers. The size limit for that cache database can be configured using the `max-cache-size` statement in the con...
Isc BindDebian Debian Linux 10.0Debian Debian Linux 11.0Debian Debian Linux 12.0Fedoraproject Fedora 37Fedoraproject Fedora 38Netapp Active Iq Unified Manager -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Netapp H410c Firmware -Netapp H300s Firmware -
356
VMScore
CVE-2021-25220
BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be af...
Isc BindFedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp H410c Firmware -Siemens Sinec Ins 1.0Siemens Sinec InsJuniper JunosJuniper Junos 19.3Juniper Junos 19.4Juniper Junos 20.2Juniper Junos 20.3Juniper Junos 20.4Juniper Junos 21.1Juniper Junos 21.2
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook