Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

isc bind 9.11.5 vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2021-25216
In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.1 of the BIND 9.17 development branch, BIND servers are vulnerable if th...
Debian Debian Linux 9.0Debian Debian Linux 10.0Isc Bind 9.11.7Isc Bind 9.11.3Isc Bind 9.11.6Isc Bind 9.10.5Isc Bind 9.11.5Isc Bind 9.9.3Isc Bind 9.10.7Isc Bind 9.11.12Isc BindIsc Bind 9.9.12Isc Bind 9.9.13Isc Bind 9.11.8Isc Bind 9.11.21Isc Bind 9.11.27Isc Bind 9.11.29Isc Bind 9.16.8Isc Bind 9.16.11Isc Bind 9.16.13Siemens Sinec Infrastructure Network ServicesNetapp Cloud Backup -
8.6
CVSSv3
CVE-2020-8616
A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafted referrals, cause a recursing server to issue a very large number of fetches in an attempt to proce...
Isc BindIsc Bind 9.12.4Isc Bind 9.11.7Isc Bind 9.11.3Isc Bind 9.11.6Isc Bind 9.10.5Isc Bind 9.11.5Isc Bind 9.9.3Isc Bind 9.10.7Isc Bind 9.11.8Debian Debian Linux 9.0Debian Debian Linux 10.0
8.1
CVSSv3
CVE-2020-8625
BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's default settings the vulnerable code path is not exposed, but a server can be rendered vulnerable by explicitly setting valid...
Isc Bind 9.11.7Isc Bind 9.11.3Isc Bind 9.11.6Isc Bind 9.11.5Isc Bind 9.11.8Isc Bind 9.11.21Isc Bind 9.17.0Isc Bind 9.17.1Isc Bind 9.16.8Isc Bind 9.16.11Isc Bind 9.11.27Isc BindDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Siemens Sinec Infrastructure Network ServicesNetapp Cloud Backup -Netapp A250 Firmware -Netapp 500f Firmware -
7.5
CVSSv3
CVE-2023-3341
The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of avai...
Isc Bind 9.11.7Isc Bind 9.11.3Isc Bind 9.11.6Isc Bind 9.10.5Isc Bind 9.11.5Isc Bind 9.9.3Isc Bind 9.10.7Isc Bind 9.11.12Isc Bind 9.11.8Isc Bind 9.9.12Isc Bind 9.9.13Isc Bind 9.11.21Isc Bind 9.16.8Isc Bind 9.16.11Isc Bind 9.11.27Isc Bind 9.16.13Isc Bind 9.11.29Isc Bind 9.16.21Isc Bind 9.11.35Isc Bind 9.11.37Isc Bind 9.16.32Isc Bind 9.16.14
7.5
CVSSv3
CVE-2022-38177
By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.
Isc Bind 9.11.7Isc Bind 9.11.3Isc Bind 9.11.6Isc Bind 9.10.5Isc Bind 9.11.5Isc Bind 9.9.3Isc Bind 9.10.7Isc Bind 9.11.12Isc Bind 9.11.8Isc Bind 9.9.12Isc Bind 9.9.13Isc Bind 9.11.21Isc Bind 9.16.8Isc Bind 9.16.11Isc Bind 9.11.27Isc Bind 9.16.13Isc Bind 9.11.29Isc Bind 9.16.21Isc Bind 9.11.35Isc Bind 9.11.14-s1Isc Bind 9.11.19-s1Isc Bind 9.11.37
7.5
CVSSv3
CVE-2022-38178
By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.
Isc BindIsc Bind 9.11.7Isc Bind 9.11.3Isc Bind 9.11.6Isc Bind 9.11.5Isc Bind 9.11.12Isc Bind 9.11.8Isc Bind 9.11.21Isc Bind 9.16.8Isc Bind 9.16.11Isc Bind 9.11.27Isc Bind 9.16.13Isc Bind 9.11.29Isc Bind 9.16.21Isc Bind 9.11.35Isc Bind 9.11.14-s1Isc Bind 9.11.19-s1Isc Bind 9.11.37Isc Bind 9.16.32Debian Debian Linux 11.0Fedoraproject Fedora 35Fedoraproject Fedora 36
7.5
CVSSv3
CVE-2021-25215
In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of name...
Debian Debian Linux 9.0Debian Debian Linux 10.0Isc Bind 9.11.7Isc Bind 9.11.3Isc Bind 9.11.6Isc Bind 9.10.5Isc Bind 9.11.5Isc Bind 9.9.3Isc Bind 9.10.7Isc Bind 9.11.12Isc Bind 9.11.8Isc Bind 9.9.12Isc Bind 9.9.13Isc Bind 9.11.21Isc Bind 9.16.8Isc Bind 9.16.11Isc Bind 9.11.27Isc Bind 9.16.13Isc Bind 9.11.29Isc BindFedoraproject Fedora 33Fedoraproject Fedora 34
7.5
CVSSv3
CVE-2020-8623
In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query packet can trigger a crash. To be vulnerable, the...
Isc BindIsc Bind 9.10.5Isc Bind 9.11.21Fedoraproject Fedora 31Fedoraproject Fedora 32Opensuse Leap 15.1Opensuse Leap 15.2Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Synology Dns ServerNetapp Steelstore Cloud Integrated Storage -
7.5
CVSSv3
CVE-2019-6477
With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query received via UDP or via TCP without pipelining enabled. A client using a TCP-pipelined connection to a server could consume more resources than the server has been pr...
Isc Bind 9.12.4Isc BindIsc Bind 9.11.6Isc Bind 9.11.5Isc Bind 9.11.12Fedoraproject Fedora 30Fedoraproject Fedora 31
7.5
CVSSv3
CVE-2018-5735
The Debian backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858; Affects Debian versions 9.9.5.dfsg-9+deb8u15; 9.9.5.dfsg-9+deb8u18; 9.10.3.dfsg.P4-12.3+deb9u5; 9.11.5.P4+dfsg-5.1 No ISC releases are affected. Other packages from other distribution...
Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook