{"items":[{"id":"CVE-2026-97313","published":"2026-10-21T12:47:28.499Z","updated":"2026-10-21T17:19:13.974Z","title":"Specific RPZ configurations and query patterns may result in an unexpected exit","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00448,"kevAdded":null,"exploit":false},{"id":"CVE-2026-96888","published":"2026-10-21T12:46:17.594Z","updated":"2026-10-21T17:19:14.117Z","title":"Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00461,"kevAdded":null,"exploit":false},{"id":"CVE-2026-94300","published":"2026-10-21T12:45:26.540Z","updated":"2026-10-22T23:04:30.599Z","title":"Concurrent GSS-TSIG messages corrupt memory","severity":"HIGH","score":8.1,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00953,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19630","published":"2026-10-21T12:41:04.379Z","updated":"2026-10-21T17:19:14.434Z","title":"Amplified resource exhaustion in inbound message processing","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00448,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77119","published":"2026-09-16T14:17:11.956Z","updated":"2026-09-17T18:39:41.607Z","title":"NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets","severity":"MEDIUM","score":5.9,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-75029","published":"2026-09-16T14:15:12.424Z","updated":"2026-09-17T18:40:16.774Z","title":"Message parser retains every identical singleton RDATA, enabling wire-to-work amplification","severity":"MEDIUM","score":5.3,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.0048,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19668","published":"2026-09-16T14:12:34.380Z","updated":"2026-09-17T18:40:52.996Z","title":"Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching","severity":"MEDIUM","score":5.3,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.0048,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19033","published":"2026-09-16T14:10:08.535Z","updated":"2026-09-17T17:36:48.716Z","title":"Unauthenticated IXFR deltas are applied to the live zone before TSIG verification","severity":"MEDIUM","score":6.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2026-80274","published":"2026-09-16T14:07:20.058Z","updated":"2026-09-17T17:37:27.082Z","title":"Validating resolver can abort while caching a mismatched NOQNAME proof","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00569,"kevAdded":null,"exploit":false},{"id":"CVE-2026-76163","published":"2026-09-16T14:05:34.811Z","updated":"2026-09-17T17:38:11.268Z","title":"named aborts on a TKEY query when the user configuration has no global options statement","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00569,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19666","published":"2026-09-16T14:02:30.453Z","updated":"2026-09-17T17:38:45.420Z","title":"Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00569,"kevAdded":null,"exploit":false},{"id":"CVE-2026-81563","published":"2026-09-16T14:00:04.129Z","updated":"2026-09-17T17:47:23.137Z","title":"SVCB AliasMode additional-data error leaks qpcache references","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00569,"kevAdded":null,"exploit":false},{"id":"CVE-2026-78301","published":"2026-09-16T13:58:11.312Z","updated":"2026-09-17T18:43:12.526Z","title":"Out-of-zone database nodes can become authoritative zone cuts","severity":"MEDIUM","score":5.8,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00207,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77692","published":"2026-09-16T13:55:45.110Z","updated":"2026-09-17T18:43:49.422Z","title":"Unauthenticated remote crash of named via a single DoH SIG(0) request","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.06558,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19941","published":"2026-09-16T13:52:49.400Z","updated":"2026-09-17T18:44:20.015Z","title":"checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proof","severity":"MEDIUM","score":5.9,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00226,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19662","published":"2026-09-16T13:50:10.432Z","updated":"2026-09-17T18:45:11.717Z","title":"qpcache NOQNAME proof use-after-free crashes recursive resolver","severity":"MEDIUM","score":5.9,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00464,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19667","published":"2026-09-16T13:46:56.783Z","updated":"2026-09-17T18:45:36.926Z","title":"Remote assertion failure via 16-bit length truncation in `dns_ncache_add()`","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00569,"kevAdded":null,"exploit":false},{"id":"CVE-2026-81736","published":"2026-09-16T13:44:28.052Z","updated":"2026-09-17T18:46:05.159Z","title":"Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00569,"kevAdded":null,"exploit":false},{"id":"CVE-2026-13321","published":"2026-07-22T14:16:10.450Z","updated":"2026-07-22T18:51:47.414Z","title":"DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field","severity":"HIGH","score":8.6,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00217,"kevAdded":null,"exploit":false},{"id":"CVE-2026-13204","published":"2026-07-22T14:15:30.557Z","updated":"2026-07-22T18:52:12.584Z","title":"Unexpected exit in certain situations with NSEC and NSEC3 both present","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00523,"kevAdded":null,"exploit":false},{"id":"CVE-2026-12617","published":"2026-07-22T14:14:46.397Z","updated":"2026-07-22T18:48:15.278Z","title":"Record ordering based unexpected exit with CNAME or DNAME","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00524,"kevAdded":null,"exploit":false},{"id":"CVE-2026-11721","published":"2026-07-22T14:13:08.748Z","updated":"2026-07-22T18:52:46.888Z","title":"Cache poisoning possible with label count discrepancy, RRSIG, and wildcards","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00395,"kevAdded":null,"exploit":false},{"id":"CVE-2026-11622","published":"2026-07-22T14:12:19.564Z","updated":"2026-07-22T18:53:14.635Z","title":"Potential memory usage beyond configured limits","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00542,"kevAdded":null,"exploit":false},{"id":"CVE-2026-11605","published":"2026-07-22T14:11:37.812Z","updated":"2026-07-22T18:53:55.674Z","title":"Unnecessary validation of DNSSEC signed records","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00672,"kevAdded":null,"exploit":false},{"id":"CVE-2026-11331","published":"2026-07-22T14:10:44.763Z","updated":"2026-07-22T18:54:17.064Z","title":"Potential wildcard CNAME RPZ policy bypass","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00428,"kevAdded":null,"exploit":false},{"id":"CVE-2026-10822","published":"2026-07-22T14:09:57.419Z","updated":"2026-07-22T18:53:34.291Z","title":"Key Record using PRIVATEDNS algorithm may lead to unexpected exit","severity":"MEDIUM","score":6.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00422,"kevAdded":null,"exploit":false},{"id":"CVE-2026-10723","published":"2026-07-22T14:08:19.609Z","updated":"2026-07-22T18:47:43.659Z","title":"Incorrect acceptance of NSEC3 records","severity":"MEDIUM","score":6.8,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00272,"kevAdded":null,"exploit":false},{"id":"CVE-2026-5950","published":"2026-05-20T13:10:19.989Z","updated":"2026-05-20T13:38:53.211Z","title":"Unbounded resend loop in BIND 9 resolver","severity":"MEDIUM","score":5.3,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.0066,"kevAdded":null,"exploit":false},{"id":"CVE-2026-5947","published":"2026-05-20T13:10:11.873Z","updated":"2026-09-01T12:05:00.589Z","title":"SIG(0) validation during query flood may lead to undefined behavior","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.01387,"kevAdded":null,"exploit":false},{"id":"CVE-2026-5946","published":"2026-05-20T13:10:03.479Z","updated":"2026-09-17T12:04:38.551Z","title":"Invalid handling of CLASS != IN","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.01942,"kevAdded":null,"exploit":false},{"id":"CVE-2026-3593","published":"2026-05-20T13:09:47.178Z","updated":"2026-09-01T12:04:55.362Z","title":"Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation","severity":"HIGH","score":7.4,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.01538,"kevAdded":null,"exploit":false},{"id":"CVE-2026-3592","published":"2026-05-20T13:09:21.547Z","updated":"2026-05-20T13:42:21.764Z","title":"Amplification vulnerabilities via self-pointed glue records","severity":"MEDIUM","score":5.3,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00406,"kevAdded":null,"exploit":false},{"id":"CVE-2026-3039","published":"2026-05-20T13:09:04.126Z","updated":"2026-09-17T12:04:38.684Z","title":"BIND 9 server memory exhaustion during GSS-API TKEY negotiation","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.01086,"kevAdded":null,"exploit":false},{"id":"CVE-2026-3591","published":"2026-03-25T13:34:14.202Z","updated":"2026-03-25T14:13:01.659Z","title":"A stack use-after-return flaw in SIG(0) handling code may enable ACL bypass","severity":"MEDIUM","score":5.4,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00367,"kevAdded":null,"exploit":false},{"id":"CVE-2026-3119","published":"2026-03-25T13:31:54.806Z","updated":"2026-03-25T14:13:54.588Z","title":"Authenticated query containing a TKEY record may cause named to terminate unexpectedly","severity":"MEDIUM","score":6.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00586,"kevAdded":null,"exploit":false},{"id":"CVE-2026-3104","published":"2026-03-25T13:29:19.494Z","updated":"2026-09-01T12:04:49.604Z","title":"Memory leak in code preparing DNSSEC proofs of non-existence","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00711,"kevAdded":null,"exploit":false},{"id":"CVE-2026-1519","published":"2026-03-25T13:25:19.802Z","updated":"2026-09-17T12:04:37.752Z","title":"Excessive NSEC3 iterations cause high CPU load during insecure delegation validation","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.01687,"kevAdded":null,"exploit":false},{"id":"CVE-2026-3608","published":"2026-03-25T08:46:48.992Z","updated":"2026-07-15T01:02:33.862Z","title":"Stack overflow in Kea daemons","severity":"HIGH","score":7.5,"vendor":"ISC","product":"Kea","kev":false,"epss":0.01385,"kevAdded":null,"exploit":false},{"id":"CVE-2025-13878","published":"2026-01-21T14:43:27.260Z","updated":"2026-09-01T12:04:43.821Z","title":"Malformed BRID/HHIT records can cause named to terminate unexpectedly","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.09423,"kevAdded":null,"exploit":false},{"id":"CVE-2025-11232","published":"2025-10-29T18:02:39.421Z","updated":"2025-11-04T21:09:09.184Z","title":"Invalid characters cause assert","severity":"HIGH","score":7.5,"vendor":"ISC","product":"Kea","kev":false,"epss":0.00421,"kevAdded":null,"exploit":false},{"id":"CVE-2025-40780","published":"2025-10-22T15:48:27.146Z","updated":"2025-11-04T21:10:16.728Z","title":"Cache poisoning due to weak PRNG","severity":"HIGH","score":8.6,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00466,"kevAdded":null,"exploit":false},{"id":"CVE-2025-40778","published":"2025-10-22T15:47:13.243Z","updated":"2026-02-26T16:57:13.134Z","title":"Cache poisoning attacks with unsolicited RRs","severity":"HIGH","score":8.6,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00769,"kevAdded":null,"exploit":true},{"id":"CVE-2025-8677","published":"2025-10-22T15:43:10.369Z","updated":"2025-11-04T21:15:09.556Z","title":"Resource exhaustion via malformed DNSKEY handling","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.10737,"kevAdded":null,"exploit":false},{"id":"CVE-2025-8696","published":"2025-09-10T17:59:52.878Z","updated":"2025-11-04T21:15:10.942Z","title":"DoS attack against the Stork UI from an unauthenticated user","severity":"HIGH","score":7.5,"vendor":"ISC","product":"Stork","kev":false,"epss":0.00461,"kevAdded":null,"exploit":false},{"id":"CVE-2025-40779","published":"2025-08-27T20:23:29.489Z","updated":"2025-11-04T21:10:15.428Z","title":"Kea crash upon interaction between specific client options and subnet selection","severity":"HIGH","score":7.5,"vendor":"ISC","product":"Kea","kev":false,"epss":0.00534,"kevAdded":null,"exploit":false},{"id":"CVE-2025-40777","published":"2025-07-16T17:38:06.370Z","updated":"2025-11-04T21:10:12.751Z","title":"A possible assertion failure when 'stale-answer-client-timeout' is set to '0'","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.01016,"kevAdded":null,"exploit":false},{"id":"CVE-2025-40776","published":"2025-07-16T13:41:01.337Z","updated":"2025-07-22T14:55:04.420Z","title":"Birthday Attack against Resolvers supporting ECS","severity":"HIGH","score":8.6,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00227,"kevAdded":null,"exploit":false},{"id":"CVE-2025-32803","published":"2025-05-28T17:08:20.769Z","updated":"2025-05-28T17:28:58.513Z","title":"Insecure file permissions can result in confidential information leakage","severity":"MEDIUM","score":4,"vendor":"ISC","product":"Kea","kev":false,"epss":0.00237,"kevAdded":null,"exploit":false},{"id":"CVE-2025-32802","published":"2025-05-28T17:08:11.180Z","updated":"2025-05-28T17:23:22.213Z","title":"Insecure handling of file paths allows multiple local attacks","severity":"MEDIUM","score":6.1,"vendor":"ISC","product":"Kea","kev":false,"epss":0.00224,"kevAdded":null,"exploit":false},{"id":"CVE-2025-32801","published":"2025-05-28T17:03:34.499Z","updated":"2025-05-28T17:33:50.355Z","title":"Loading a malicious hook library can lead to local privilege escalation","severity":"HIGH","score":7.8,"vendor":"ISC","product":"Kea","kev":false,"epss":0.00297,"kevAdded":null,"exploit":false},{"id":"CVE-2025-40775","published":"2025-05-21T12:35:01.862Z","updated":"2025-05-23T13:11:08.588Z","title":"DNS message with invalid TSIG causes an assertion failure","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.15312,"kevAdded":null,"exploit":false},{"id":"CVE-2024-12705","published":"2025-01-29T21:40:27.839Z","updated":"2025-02-07T17:02:44.473Z","title":"DNS-over-HTTPS implementation suffers from multiple issues under heavy query load","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.18566,"kevAdded":null,"exploit":false},{"id":"CVE-2024-11187","published":"2025-01-29T21:40:11.942Z","updated":"2025-02-11T19:02:32.914Z","title":"Many records in the additional section cause CPU exhaustion","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.16015,"kevAdded":null,"exploit":false},{"id":"CVE-2024-4076","published":"2024-07-23T14:40:57.256Z","updated":"2025-02-13T17:53:23.437Z","title":"Assertion failure when serving both stale cache data and authoritative zone content","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.02111,"kevAdded":null,"exploit":false},{"id":"CVE-2024-1975","published":"2024-07-23T14:38:57.143Z","updated":"2025-02-13T17:32:28.908Z","title":"SIG(0) can be used to exhaust CPU resources","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.02114,"kevAdded":null,"exploit":false},{"id":"CVE-2024-1737","published":"2024-07-23T14:34:09.750Z","updated":"2025-02-13T17:32:25.755Z","title":"BIND's database will be slow if a very large number of RRs exist at the same name","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.02114,"kevAdded":null,"exploit":false},{"id":"CVE-2024-0760","published":"2024-07-23T14:26:54.983Z","updated":"2025-02-13T17:27:19.172Z","title":"A flood of DNS messages over TCP may make the server unstable","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.0468,"kevAdded":null,"exploit":false},{"id":"CVE-2024-28872","published":"2024-07-11T14:49:12.156Z","updated":"2025-03-26T14:40:49.861Z","title":"Incorrect TLS certificate validation can lead to escalated privileges","severity":"HIGH","score":8.9,"vendor":"ISC","product":"Stork","kev":false,"epss":0.00291,"kevAdded":null,"exploit":false},{"id":"CVE-2023-6516","published":"2024-02-13T14:05:28.933Z","updated":"2025-02-13T17:26:26.170Z","title":"Specific recursive query patterns may lead to an out-of-memory condition","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.01097,"kevAdded":null,"exploit":false},{"id":"CVE-2023-5680","published":"2024-02-13T14:05:19.783Z","updated":"2025-03-17T15:04:41.734Z","title":"Cleaning an ECS-enabled cache may cause excessive CPU load","severity":"MEDIUM","score":5.3,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00624,"kevAdded":null,"exploit":false},{"id":"CVE-2023-5679","published":"2024-02-13T14:05:06.688Z","updated":"2025-03-28T23:51:12.042Z","title":"Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.01276,"kevAdded":null,"exploit":false},{"id":"CVE-2023-5517","published":"2024-02-13T14:04:54.389Z","updated":"2025-02-13T17:25:39.556Z","title":"Querying RFC 1918 reverse zones may cause an assertion failure when \"nxdomain-redirect\" is enabled","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.01276,"kevAdded":null,"exploit":false},{"id":"CVE-2023-4408","published":"2024-02-13T14:04:17.519Z","updated":"2025-03-14T16:16:25.564Z","title":"Parsing large DNS messages may cause excessive CPU load","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.01387,"kevAdded":null,"exploit":false},{"id":"CVE-2023-4236","published":"2023-09-20T12:32:16.631Z","updated":"2025-02-13T17:09:18.327Z","title":"named may terminate unexpectedly under high DNS-over-TLS query load","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.02189,"kevAdded":null,"exploit":false},{"id":"CVE-2023-3341","published":"2023-09-20T12:32:03.073Z","updated":"2025-12-02T20:15:58.967Z","title":"A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.02934,"kevAdded":null,"exploit":false},{"id":"CVE-2023-2911","published":"2023-06-21T16:26:36.587Z","updated":"2025-02-13T16:49:00.351Z","title":"Exceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.02431,"kevAdded":null,"exploit":false},{"id":"CVE-2023-2829","published":"2023-06-21T16:26:24.932Z","updated":"2025-02-13T16:48:38.687Z","title":"Malformed NSEC records can cause named to terminate unexpectedly when synth-from-dnssec is enabled","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.00868,"kevAdded":null,"exploit":false},{"id":"CVE-2023-2828","published":"2023-06-21T16:26:07.096Z","updated":"2025-02-13T16:48:38.124Z","title":"named's configured cache size limit can be significantly exceeded","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.03696,"kevAdded":null,"exploit":false},{"id":"CVE-2022-3924","published":"2023-01-25T21:39:49.110Z","updated":"2025-03-31T13:58:09.212Z","title":"named configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quota","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.15989,"kevAdded":null,"exploit":false},{"id":"CVE-2022-3736","published":"2023-01-25T21:39:18.187Z","updated":"2025-04-01T14:10:47.439Z","title":"named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.48427,"kevAdded":null,"exploit":false},{"id":"CVE-2022-3488","published":"2023-01-25T21:37:47.872Z","updated":"2025-04-01T14:12:27.102Z","title":"named may terminate unexpectedly when processing ECS options in repeated responses to iterative queries","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.19045,"kevAdded":null,"exploit":false},{"id":"CVE-2022-3094","published":"2023-01-25T21:34:52.983Z","updated":"2025-04-01T13:48:37.944Z","title":"An UPDATE message flood may cause named to exhaust all available memory","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.13213,"kevAdded":null,"exploit":false},{"id":"CVE-2022-2929","published":"2022-10-07T04:45:12.836Z","updated":"2024-09-16T18:28:37.665Z","title":"DHCP memory leak","severity":"MEDIUM","score":6.5,"vendor":"ISC","product":"ISC DHCP","kev":false,"epss":0.00664,"kevAdded":null,"exploit":false},{"id":"CVE-2022-2928","published":"2022-10-07T04:45:11.751Z","updated":"2024-09-17T00:21:40.167Z","title":"An option refcount overflow exists in dhcpd","severity":"MEDIUM","score":6.5,"vendor":"ISC","product":"ISC DHCP","kev":false,"epss":0.00711,"kevAdded":null,"exploit":false},{"id":"CVE-2022-3080","published":"2022-09-21T10:15:29.861Z","updated":"2024-09-17T01:56:40.440Z","title":"BIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedly","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.02005,"kevAdded":null,"exploit":false},{"id":"CVE-2022-38178","published":"2022-09-21T10:15:29.078Z","updated":"2025-05-28T15:23:06.572Z","title":"Memory leaks in EdDSA DNSSEC verification code","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.03112,"kevAdded":null,"exploit":false},{"id":"CVE-2022-38177","published":"2022-09-21T10:15:28.292Z","updated":"2025-05-28T15:23:30.627Z","title":"Memory leak in ECDSA DNSSEC verification code","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.03288,"kevAdded":null,"exploit":false},{"id":"CVE-2022-2906","published":"2022-09-21T10:15:27.446Z","updated":"2025-05-28T15:25:56.879Z","title":"Memory leaks in code handling Diffie-Hellman key exchange via TKEY RRs (OpenSSL 3.0.0+ only)","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.02048,"kevAdded":null,"exploit":false},{"id":"CVE-2022-2881","published":"2022-09-21T10:15:26.604Z","updated":"2025-05-28T15:26:32.410Z","title":"Buffer overread in statistics channel code","severity":"MEDIUM","score":5.5,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.01408,"kevAdded":null,"exploit":false},{"id":"CVE-2022-2795","published":"2022-09-21T10:15:25.796Z","updated":"2024-11-29T12:04:33.614Z","title":"Processing large delegations may severely degrade resolver performance","severity":"MEDIUM","score":5.3,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.02291,"kevAdded":null,"exploit":false},{"id":"CVE-2022-1183","published":"2022-05-19T09:55:09.565Z","updated":"2024-09-17T04:00:26.575Z","title":"Destroying a TLS session early causes assertion failure","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.06243,"kevAdded":null,"exploit":false},{"id":"CVE-2021-25220","published":"2022-03-23T12:50:10.367Z","updated":"2024-09-16T17:08:54.143Z","title":"DNS forwarders - cache poisoning vulnerability","severity":"MEDIUM","score":6.8,"vendor":"ISC","product":"BIND","kev":false,"epss":0.0345,"kevAdded":null,"exploit":false},{"id":"CVE-2022-0635","published":"2022-03-23T11:55:10.058Z","updated":"2024-09-17T02:21:44.299Z","title":"Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually terminate due to a…","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND","kev":false,"epss":0.01374,"kevAdded":null,"exploit":false},{"id":"CVE-2022-0396","published":"2022-03-23T10:45:13.589Z","updated":"2024-09-16T19:05:24.544Z","title":"DoS from specifically crafted TCP packets","severity":"MEDIUM","score":5.3,"vendor":"ISC","product":"BIND","kev":false,"epss":0.02681,"kevAdded":null,"exploit":false},{"id":"CVE-2022-0667","published":"2022-03-22T11:15:13.972Z","updated":"2024-09-16T22:20:53.204Z","title":"Assertion failure on delayed DS lookup","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND","kev":false,"epss":0.01374,"kevAdded":null,"exploit":false},{"id":"CVE-2021-25219","published":"2021-10-27T21:10:10.088Z","updated":"2024-09-16T17:33:38.865Z","title":"Lame cache can be abused to severely degrade resolver performance","severity":"MEDIUM","score":5.3,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.11158,"kevAdded":null,"exploit":false},{"id":"CVE-2021-25218","published":"2021-08-18T18:20:11.962Z","updated":"2024-09-17T03:07:43.591Z","title":"A too-strict assertion check could be triggered when responses in BIND 9.16.19 and 9.17.16 require UDP fragmentation if RRL is in use","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.03658,"kevAdded":null,"exploit":false},{"id":"CVE-2021-25217","published":"2021-05-26T22:10:11.312Z","updated":"2024-09-16T22:08:32.175Z","title":"A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient","severity":"HIGH","score":7.4,"vendor":"ISC","product":"ISC DHCP","kev":false,"epss":0.06118,"kevAdded":null,"exploit":false},{"id":"CVE-2021-25216","published":"2021-04-29T00:55:17.362Z","updated":"2024-09-16T22:25:23.581Z","title":"A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack","severity":"HIGH","score":8.1,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.82992,"kevAdded":null,"exploit":false},{"id":"CVE-2021-25215","published":"2021-04-29T00:55:16.726Z","updated":"2024-09-16T22:02:24.791Z","title":"An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.11695,"kevAdded":null,"exploit":false},{"id":"CVE-2021-25214","published":"2021-04-29T00:55:16.042Z","updated":"2024-09-17T00:37:21.136Z","title":"A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly","severity":"MEDIUM","score":6.5,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.06403,"kevAdded":null,"exploit":false},{"id":"CVE-2020-8625","published":"2021-02-17T22:40:16.090Z","updated":"2024-09-16T22:40:02.277Z","title":"A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack","severity":"HIGH","score":8.1,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.64161,"kevAdded":null,"exploit":false},{"id":"CVE-2020-8624","published":"2020-08-21T20:50:20.258Z","updated":"2024-09-16T17:52:52.920Z","title":"update-policy rules of type \"subdomain\" are enforced incorrectly","severity":"MEDIUM","score":4.3,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.0382,"kevAdded":null,"exploit":false},{"id":"CVE-2020-8623","published":"2020-08-21T20:50:19.797Z","updated":"2024-09-17T03:19:11.433Z","title":"A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.06606,"kevAdded":null,"exploit":false},{"id":"CVE-2020-8622","published":"2020-08-21T20:50:19.383Z","updated":"2024-09-16T17:14:14.760Z","title":"A truncated TSIG response can lead to an assertion failure","severity":"MEDIUM","score":6.5,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.05904,"kevAdded":null,"exploit":false},{"id":"CVE-2020-8621","published":"2020-08-21T20:50:18.959Z","updated":"2024-09-16T16:18:00.777Z","title":"Attempting QNAME minimization after forwarding can lead to an assertion failure in resolver.c","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.03065,"kevAdded":null,"exploit":false},{"id":"CVE-2020-8620","published":"2020-08-21T20:50:18.547Z","updated":"2024-09-17T01:40:34.573Z","title":"In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to…","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.03902,"kevAdded":null,"exploit":false},{"id":"CVE-2020-8619","published":"2020-06-17T21:20:13.611Z","updated":"2024-09-17T03:28:34.772Z","title":"A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer","severity":"MEDIUM","score":4.9,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.02146,"kevAdded":null,"exploit":false},{"id":"CVE-2020-8618","published":"2020-06-17T21:20:13.188Z","updated":"2024-09-16T23:36:09.070Z","title":"A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer","severity":"MEDIUM","score":4.9,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.01884,"kevAdded":null,"exploit":false},{"id":"CVE-2020-8617","published":"2020-05-19T14:05:16.241Z","updated":"2024-09-16T20:26:32.566Z","title":"A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.93332,"kevAdded":null,"exploit":true},{"id":"CVE-2020-8616","published":"2020-05-19T14:05:15.798Z","updated":"2024-09-16T23:55:28.601Z","title":"BIND does not sufficiently limit the number of fetches performed when processing referrals","severity":"HIGH","score":8.6,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.1088,"kevAdded":null,"exploit":false},{"id":"CVE-2019-6477","published":"2019-11-26T16:11:16.500Z","updated":"2024-09-16T16:47:45.899Z","title":"TCP-pipelined queries can bypass tcp-clients limit","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND9","kev":false,"epss":0.04134,"kevAdded":null,"exploit":false},{"id":"CVE-2019-6476","published":"2019-10-17T19:17:39.240Z","updated":"2024-09-16T16:58:26.060Z","title":"An error in QNAME minimization code can cause BIND to exit with an assertion failure","severity":"MEDIUM","score":5.9,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.02963,"kevAdded":null,"exploit":false},{"id":"CVE-2019-6475","published":"2019-10-17T19:17:36.355Z","updated":"2024-09-16T17:54:52.004Z","title":"A flaw in mirror zone validity checking can allow zone data to be spoofed","severity":"MEDIUM","score":5.9,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.01363,"kevAdded":null,"exploit":false},{"id":"CVE-2019-6474","published":"2019-10-16T17:22:16.767Z","updated":"2024-09-16T22:19:36.160Z","title":"A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate","severity":"MEDIUM","score":5.7,"vendor":"ISC","product":"Kea","kev":false,"epss":0.00712,"kevAdded":null,"exploit":false},{"id":"CVE-2019-6473","published":"2019-10-16T17:22:16.730Z","updated":"2024-09-16T22:30:41.265Z","title":"A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate","severity":"MEDIUM","score":6.5,"vendor":"ISC","product":"Kea","kev":false,"epss":0.01159,"kevAdded":null,"exploit":false},{"id":"CVE-2019-6472","published":"2019-10-16T17:22:16.689Z","updated":"2024-09-17T03:58:54.278Z","title":"A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate","severity":"MEDIUM","score":6.5,"vendor":"ISC","product":"Kea","kev":false,"epss":0.00796,"kevAdded":null,"exploit":false},{"id":"CVE-2019-6471","published":"2019-10-09T14:17:14.566Z","updated":"2024-09-17T01:56:17.224Z","title":"A race condition when discarding malformed packets can cause BIND to exit with an assertion failure","severity":"MEDIUM","score":5.9,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.03286,"kevAdded":null,"exploit":false},{"id":"CVE-2019-6469","published":"2019-10-09T14:17:14.528Z","updated":"2024-09-17T01:30:59.645Z","title":"BIND Supported Preview Edition can exit with an assertion failure if ECS is in use","severity":"MEDIUM","score":5.9,"vendor":"ISC","product":"BIND 9 Supported Preview Edition","kev":false,"epss":0.01954,"kevAdded":null,"exploit":false},{"id":"CVE-2019-6468","published":"2019-10-09T14:17:14.488Z","updated":"2024-09-16T18:44:17.039Z","title":"BIND Supported Preview Edition can exit with an assertion failure if nxdomain-redirect is used","severity":"MEDIUM","score":5.3,"vendor":"ISC","product":"BIND 9 Supported Preview Edition","kev":false,"epss":0.0261,"kevAdded":null,"exploit":false},{"id":"CVE-2019-6467","published":"2019-10-09T14:17:14.449Z","updated":"2024-09-17T00:11:15.675Z","title":"An error in the nxdomain redirect feature can cause BIND to exit with an INSIST assertion failure in query.c","severity":"MEDIUM","score":5.9,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.05564,"kevAdded":null,"exploit":false},{"id":"CVE-2019-6465","published":"2019-10-09T14:17:14.410Z","updated":"2024-09-16T20:37:52.694Z","title":"Zone transfer controls for writable DLZ zones were not effective","severity":"MEDIUM","score":5.3,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.03979,"kevAdded":null,"exploit":false},{"id":"CVE-2018-5745","published":"2019-10-09T14:17:14.370Z","updated":"2024-09-16T23:51:32.462Z","title":"An assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys","severity":"MEDIUM","score":4.9,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.02293,"kevAdded":null,"exploit":false},{"id":"CVE-2018-5744","published":"2019-10-09T14:17:14.332Z","updated":"2024-09-16T22:21:17.098Z","title":"A specially crafted packet can cause named to leak memory","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.03446,"kevAdded":null,"exploit":false},{"id":"CVE-2018-5743","published":"2019-10-09T14:17:14.293Z","updated":"2024-09-17T02:26:38.493Z","title":"Limiting simultaneous TCP clients was ineffective","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.06433,"kevAdded":null,"exploit":false},{"id":"CVE-2018-5732","published":"2019-10-09T14:17:14.251Z","updated":"2024-09-16T18:19:36.136Z","title":"A specially constructed response from a malicious server can cause a buffer overflow in dhclient","severity":"HIGH","score":7.5,"vendor":"ISC","product":"ISC DHCP","kev":false,"epss":0.05244,"kevAdded":null,"exploit":false},{"id":"CVE-2018-5741","published":"2019-01-16T20:00:00.000Z","updated":"2024-09-17T02:26:39.095Z","title":"Update policies krb5-subdomain and ms-subdomain do not enforce controls promised in their documentation","severity":"MEDIUM","score":6.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.03451,"kevAdded":null,"exploit":false},{"id":"CVE-2018-5740","published":"2019-01-16T20:00:00.000Z","updated":"2024-09-16T17:58:43.029Z","title":"A flaw in the \"deny-answer-aliases\" feature can cause an assertion failure in named","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.60236,"kevAdded":null,"exploit":false},{"id":"CVE-2018-5739","published":"2019-01-16T20:00:00.000Z","updated":"2024-09-17T02:11:49.386Z","title":"Failure to release memory may exhaust system resources","severity":"MEDIUM","score":6.5,"vendor":"ISC","product":"Kea DHCP","kev":false,"epss":0.01928,"kevAdded":null,"exploit":false},{"id":"CVE-2018-5738","published":"2019-01-16T20:00:00.000Z","updated":"2024-09-16T22:20:36.711Z","title":"Some versions of BIND can improperly permit recursive query service to unauthorized clients","severity":"MEDIUM","score":5.3,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.1137,"kevAdded":null,"exploit":false},{"id":"CVE-2018-5737","published":"2019-01-16T20:00:00.000Z","updated":"2024-09-16T22:40:22.628Z","title":"BIND 9.12's serve-stale implementation can cause an assertion failure in rbtdb.c or other undesirable behavior, even if serve-stale is not enabled.","severity":"MEDIUM","score":5.9,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.10635,"kevAdded":null,"exploit":false},{"id":"CVE-2018-5734","published":"2019-01-16T20:00:00.000Z","updated":"2024-09-17T02:31:46.321Z","title":"A malformed request can trigger an assertion failure in badcache.c","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.06407,"kevAdded":null,"exploit":false},{"id":"CVE-2018-5733","published":"2019-01-16T20:00:00.000Z","updated":"2025-04-25T23:02:52.084Z","title":"A malicious client can overflow a reference counter in ISC dhcpd","severity":"MEDIUM","score":5.9,"vendor":"ISC","product":"ISC DHCP","kev":false,"epss":0.20242,"kevAdded":null,"exploit":false},{"id":"CVE-2017-3145","published":"2019-01-16T20:00:00.000Z","updated":"2024-09-17T00:10:46.349Z","title":"Improper fetch cleanup sequencing in the resolver can cause named to crash","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.27725,"kevAdded":null,"exploit":false},{"id":"CVE-2017-3144","published":"2019-01-16T20:00:00.000Z","updated":"2024-09-16T22:46:13.879Z","title":"Failure to properly clean up closed OMAPI connections can exhaust available sockets","severity":"MEDIUM","score":5.3,"vendor":"ISC","product":"ISC DHCP","kev":false,"epss":0.72724,"kevAdded":null,"exploit":false},{"id":"CVE-2017-3143","published":"2019-01-16T20:00:00.000Z","updated":"2024-09-16T16:14:21.796Z","title":"An error in TSIG authentication can permit unauthorized dynamic updates","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.18157,"kevAdded":null,"exploit":false},{"id":"CVE-2017-3142","published":"2019-01-16T20:00:00.000Z","updated":"2024-09-16T17:08:46.835Z","title":"An error in TSIG authentication can permit unauthorized zone transfers","severity":"MEDIUM","score":5.3,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.054,"kevAdded":null,"exploit":false},{"id":"CVE-2017-3141","published":"2019-01-16T20:00:00.000Z","updated":"2024-09-16T17:23:44.753Z","title":"Windows service and uninstall paths are not quoted when BIND is installed","severity":"HIGH","score":7.2,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.01413,"kevAdded":null,"exploit":true},{"id":"CVE-2017-3140","published":"2019-01-16T20:00:00.000Z","updated":"2024-09-17T04:10:30.985Z","title":"An error processing RPZ rules can cause named to loop endlessly after handling a query","severity":"LOW","score":3.7,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.12184,"kevAdded":null,"exploit":false},{"id":"CVE-2017-3138","published":"2019-01-16T20:00:00.000Z","updated":"2024-09-16T22:40:54.323Z","title":"named exits with a REQUIRE assertion failure if it receives a null command string on its control channel","severity":"MEDIUM","score":6.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.05503,"kevAdded":null,"exploit":false},{"id":"CVE-2017-3137","published":"2019-01-16T20:00:00.000Z","updated":"2024-09-17T01:02:07.037Z","title":"A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.08902,"kevAdded":null,"exploit":false},{"id":"CVE-2017-3136","published":"2019-01-16T20:00:00.000Z","updated":"2024-09-17T00:51:35.181Z","title":"An error handling synthesized records could cause an assertion failure when using DNS64 with \"break-dnssec yes;\"","severity":"MEDIUM","score":5.9,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.11093,"kevAdded":null,"exploit":false},{"id":"CVE-2017-3135","published":"2019-01-16T20:00:00.000Z","updated":"2024-09-16T17:53:49.488Z","title":"Combination of DNS64 and RPZ Can Lead to Crash","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.17108,"kevAdded":null,"exploit":false},{"id":"CVE-2016-9778","published":"2019-01-16T20:00:00.000Z","updated":"2024-09-16T20:01:47.192Z","title":"An error handling certain queries using the nxdomain-redirect feature could cause a REQUIRE assertion failure in db.c","severity":"HIGH","score":7.5,"vendor":"ISC","product":"BIND 9","kev":false,"epss":0.06818,"kevAdded":null,"exploit":false}]}