CVE-2014-0591

CVE-2014-0591 affects ISC BIND 9.6, 9.7, 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2 (and 9.6-ESV before 9.6-ESV-R10-P2) where the query_findclosestnsec3 function in query.c can be triggered by crafted DNS queries to an authoritative server using NSEC3 signing. The result is a denial of service m...

CVE-2009-4022

CVE-2009-4022 affects ISC BIND 9.0.x–9.3.x, and 9.4.x prior to 9.4.3-P4, 9.5 prior to 9.5.2-P1, 9.6 prior to 9.6.1-P2, and 9.7 beta prior to 9.7.0b3, when DNSSEC validation is enabled and DO checks are used, allowing remote cache-poisoning via crafted Additional sections in responses to recursive...

CVE-2010-0213

CVE-2010-0213 affects BIND 9.7.1 and 9.7.1-P1 when a recursive validating server uses a statically configured trust anchor or DNSSEC Lookaside Validation (DLV). The flaw allows remote attackers to trigger a denial of service (infinite loop) by issuing a query for an RRSIG record whose answer is n...

CVE-2011-2465

CVE-2011-2465 affects ISC BIND 9.8.0, 9.8.0-P1, 9.8.0-P2 and 9.8.1b1 with recursion enabled and RPZ containing DNAME or certain CNAMEs; an unspecified query can cause a denial of service (named daemon crash). Exploitation specifics are not provided in the sources. Public remediation notes include...

CVE-1999-1499

The CVE-1999-1499 entry describes a local privilege issue in ISC BIND 4.9 and 8.1. It is triggered by a symlink attack on either named_dump.db (when root kills the process with SIGINT) or named.stats (when SIGIOT is used), allowing local users to destroy files via the symlink mechanism. The linke...