CVE-2021-25220

CVE-2021-25220 affects ISC BIND where cache poisoning can occur when using DNS forwarders, allowing forged NS records to be cached and cause queries to reach the wrong servers or return false information. The Initial CVE data covers BIND versions from 9.11.x (including 9.11.0–9.11.36) and 9.12.x ...

CVE-2021-25214

CVE-2021-25214 affects BIND’s named when processing a malformed IXFR, causing named to terminate on the next refresh of the transferred zone. Concrete details across connected advisories show affected BIND ranges and the specific fixes: ALT Linux and others report updates that address CVEs 25214/...

CVE-2018-5741

CVE-2018-5741 concerns ISC BIND 9 and its update-policy feature for Dynamic DNS (DDNS). The issue stems from incorrect documentation of krb5-subdomain and ms-subdomain rule types in the Administrator Reference Manual, which could lead operators to believe their configured policies are more restri...

CVE-2020-8622

CVE-2020-8622 pertains to ISC BIND and causes an assertion failure leading to a server exit when processing a truncated TSIG-signed response. The vulnerability can be triggered by an attacker on the network path or by exploiting a server receiving a TSIG-signed request, potentially harming availa...

CVE-2016-1285

CVE-2016-1285 affects ISC BIND 9.x (before 9.9.8-P4 and 9.10.x before 9.10.3-P4). The issue arises from improper handling of control-channel input to rndc, causing assertion failure and named daemon exit via a malformed packet. Connected advisories describe related impact for DNAME records (CVE-2...

CVE-2016-6170

CVE-2016-6170 affects ISC BIND up to 9.11.0b1 (and related 9.9.9-P1, 9.10.x, etc.). The provided records describe a denial-of-service risk: a primary DNS server can crash a secondary server via a large AXFR, IXFR responses, and an authenticated UPDATE could crash the primary. Documented affected ...

CVE-2008-1447

CVE-2008-1447 describes a DNS cache poisoning vulnerability known as the Kaminsky bug, arising from weak randomness in DNS transaction IDs and source ports. It affected BIND 8/9 (many versions) and Microsoft DNS on Windows platforms, enabling remote attackers to spoof DNS responses to recursive r...

CVE-2015-8704

CVE-2015-8704 affects ISC BIND 9.x; the vulnerability is in apl_42.c where malformed Address Prefix List (APL) data can trigger an INSIST assertion failure, causing the named process to terminate and a potential DoS. Affected: BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3. Exploita...

CVE-2013-6230

CVE-2013-6230 concerns ISC BIND and Windows Winsock: the WSAIoctl SIO_GET_INTERFACE_LIST path misinterprets the netmask 255.255.255.255, allowing remote bypass of IP address restrictions. Public details show affected BIND lines include 9.6-ESV to 9.9.x series; Windows Server 2008 usage is cited. ...

CVE-2009-0025

CVE-2009-0025 describes a flaw in BIND 9.6.0 and earlier where the OpenSSL DSA_verify return value is not properly checked, enabling remote attackers to bypass certificate-chain validation via a malformed SSL/TLS signature. F5 advisories reference this as a related vulnerability to CVE-2008-5077 ...

CVE-2010-3614

The CVE-2010-3614 issue affects ISC BIND 9.x where DNSKEY algorithm rollover can cause the server to misdetermine the NS RRset security status, potentially triggering DNSSEC validation errors and a denial of service. Public advisories and vendor notes (e.g., Debian DSA-2130-1, CentOS/RH advisorie...

CVE-2017-3138

CVE-2017-3138 affects the BIND/named control channel. A regression can cause named to exit with a REQUIRE assertion failure when it receives a null command string on the control channel, potentially enabling denial-of-service. Affected versions in the CVE scope include BIND 9.9.9 through 9.11.1rc...

CVE-1999-0184

CVE-1999-0184 affects bind when built with the -DALLOW_UPDATES option, enabling dynamic updates to the DNS server and allowing malicious modification of DNS records. The vulnerability is tied to enabling dynamic updates in the DNS server, with impact described as potential modification of records...

CVE-2016-2088

CVE-2016-2088 affects ISC BIND 9.10.x prior to 9.10.3-P4. When DNS cookies are enabled, a remote attacker can send a malformed packet with multiple cookie options to trigger an assertion failure in resolver.c and cause named to crash (denial of service). Connected sources corroborate the vulnerab...

CVE-2026-3119

CVE-2026-3119 affects ISC BIND 9: when processing a correctly signed query containing a TSIG-signed TKEY, named may crash (terminate unexpectedly). Affected versions: 9.20.0–9.20.20, 9.21.0–9.21.19, and 9.20.9-S1–9.20.20-S1. Unaffected: 9.18.0–9.18.46 and 9.18.11-S1–9.18.46-S1. The issue requires...