Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

isc bind 9.16.8 vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2021-25216
In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.1 of the BIND 9.17 development branch, BIND servers are vulnerable if th...
Debian Debian Linux 9.0Debian Debian Linux 10.0Isc Bind 9.11.7Isc Bind 9.11.3Isc Bind 9.11.6Isc Bind 9.10.5Isc Bind 9.11.5Isc Bind 9.9.3Isc Bind 9.10.7Isc Bind 9.11.12Isc BindIsc Bind 9.9.12Isc Bind 9.9.13Isc Bind 9.11.8Isc Bind 9.11.21Isc Bind 9.11.27Isc Bind 9.11.29Isc Bind 9.16.8Isc Bind 9.16.11Isc Bind 9.16.13Siemens Sinec Infrastructure Network ServicesNetapp Cloud Backup -
8.1
CVSSv3
CVE-2020-8625
BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's default settings the vulnerable code path is not exposed, but a server can be rendered vulnerable by explicitly setting valid...
Isc Bind 9.11.7Isc Bind 9.11.3Isc Bind 9.11.6Isc Bind 9.11.5Isc Bind 9.11.8Isc Bind 9.11.21Isc Bind 9.17.0Isc Bind 9.17.1Isc Bind 9.16.8Isc Bind 9.16.11Isc Bind 9.11.27Isc BindDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Siemens Sinec Infrastructure Network ServicesNetapp Cloud Backup -Netapp A250 Firmware -Netapp 500f Firmware -
7.5
CVSSv3
CVE-2023-3341
The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of avai...
Isc Bind 9.11.7Isc Bind 9.11.3Isc Bind 9.11.6Isc Bind 9.10.5Isc Bind 9.11.5Isc Bind 9.9.3Isc Bind 9.10.7Isc Bind 9.11.12Isc Bind 9.11.8Isc Bind 9.9.12Isc Bind 9.9.13Isc Bind 9.11.21Isc Bind 9.16.8Isc Bind 9.16.11Isc Bind 9.11.27Isc Bind 9.16.13Isc Bind 9.11.29Isc Bind 9.16.21Isc Bind 9.11.35Isc Bind 9.11.37Isc Bind 9.16.32Isc Bind 9.16.14
7.5
CVSSv3
CVE-2023-2829
A `named` instance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validated Cache (RFC 8198) option (`synth-from-dnssec`) enabled can be remotely terminated using a zone with a malformed NSEC record. This issue affects BIND 9 version...
Isc BindNetapp Active Iq Unified Manager -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Netapp H410c Firmware -Netapp H300s Firmware -
7.5
CVSSv3
CVE-2022-3488
Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can cause BIND to exit with an assertion failure. 'Broken' in this context is anything that would cause the resolver to reject...
Isc Bind 9.16.8Isc Bind 9.11.37Isc Bind 9.16.36Isc Bind 9.11.4
7.5
CVSSv3
CVE-2022-3094
Sending a flood of dynamic DNS updates may cause `named` to allocate large amounts of memory. This, in turn, may cause `named` to exit due to a lack of free memory. We are not aware of any cases where this has been exploited. Memory is allocated prior to the checking of access pe...
Isc Bind 9.16.8Isc Bind 9.16.11Isc Bind 9.16.13Isc Bind 9.16.21Isc Bind 9.16.32Isc Bind 9.16.14Isc BindIsc Bind 9.16.36
7.5
CVSSv3
CVE-2022-38177
By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.
Isc Bind 9.11.7Isc Bind 9.11.3Isc Bind 9.11.6Isc Bind 9.10.5Isc Bind 9.11.5Isc Bind 9.9.3Isc Bind 9.10.7Isc Bind 9.11.12Isc Bind 9.11.8Isc Bind 9.9.12Isc Bind 9.9.13Isc Bind 9.11.21Isc Bind 9.16.8Isc Bind 9.16.11Isc Bind 9.11.27Isc Bind 9.16.13Isc Bind 9.11.29Isc Bind 9.16.21Isc Bind 9.11.35Isc Bind 9.11.14-s1Isc Bind 9.11.19-s1Isc Bind 9.11.37
7.5
CVSSv3
CVE-2022-38178
By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.
Isc BindIsc Bind 9.11.7Isc Bind 9.11.3Isc Bind 9.11.6Isc Bind 9.11.5Isc Bind 9.11.12Isc Bind 9.11.8Isc Bind 9.11.21Isc Bind 9.16.8Isc Bind 9.16.11Isc Bind 9.11.27Isc Bind 9.16.13Isc Bind 9.11.29Isc Bind 9.16.21Isc Bind 9.11.35Isc Bind 9.11.14-s1Isc Bind 9.11.19-s1Isc Bind 9.11.37Isc Bind 9.16.32Debian Debian Linux 11.0Fedoraproject Fedora 35Fedoraproject Fedora 36
7.5
CVSSv3
CVE-2021-25215
In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of name...
Debian Debian Linux 9.0Debian Debian Linux 10.0Isc Bind 9.11.7Isc Bind 9.11.3Isc Bind 9.11.6Isc Bind 9.10.5Isc Bind 9.11.5Isc Bind 9.9.3Isc Bind 9.10.7Isc Bind 9.11.12Isc Bind 9.11.8Isc Bind 9.9.12Isc Bind 9.9.13Isc Bind 9.11.21Isc Bind 9.16.8Isc Bind 9.16.11Isc Bind 9.11.27Isc Bind 9.16.13Isc Bind 9.11.29Isc BindFedoraproject Fedora 33Fedoraproject Fedora 34
6.8
CVSSv3
CVE-2021-25220
BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be af...
Isc BindFedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp H410c Firmware -Siemens Sinec Ins 1.0Siemens Sinec InsJuniper JunosJuniper Junos 19.3Juniper Junos 19.4Juniper Junos 20.2Juniper Junos 20.3Juniper Junos 20.4Juniper Junos 21.1Juniper Junos 21.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook