isc

258 tracked vulnerabilities.

CVE-2022-38178 HIGH
BIND >=9.9.12 <9.9.13 - Denial of Service via Malformed EdDSA Signature
Sep 21, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-38177 HIGH
BIND >=9.8.4 <9.16.32 - Use-After-Free via Malformed ECDSA Signature
Sep 21, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-2906 HIGH
BIND 9.18.0-9.18.6 - Denial of Service via Memory Exhaustion
Sep 21, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-2881 MEDIUM
ISC BIND 9.18.0 through 9.18.7 - Out-of-Bounds Read
Sep 21, 2022
CVSS 5.5
EPSS 0.01
CVE-2022-2795 MEDIUM
DNS Resolver - DoS
Sep 21, 2022
CVSS 5.3
EPSS 0.00
CVE-2022-1183 HIGH
BIND 9.18.0-9.18.2 and 9.19.0 - Reachable Assertion via HTTP in listen-on Statement
May 19, 2022
CVSS 7.5
EPSS 0.00
CVE-2022-0635 HIGH
BIND 9.18.0 - Denial of Service via Assertion Failure
Mar 23, 2022
CVSS 7.5
EPSS 0.01
CVE-2022-0396 MEDIUM
BIND 9.16.11-9.16.26 and 9.17.0-9.18.0 - Denial of Service via CLOSE_WAIT Connection Exhaustion
Mar 23, 2022
CVSS 5.3
EPSS 0.00
CVE-2022-0667 HIGH
BIND 9.18.0 - Denial of Service via Reachable Assertion
Mar 22, 2022
CVSS 7.5
EPSS 0.01
CVE-2021-25220 MEDIUM
Juniper Junos < 19.3 - HTTP Request Smuggling
Mar 23, 2022
CVSS 6.8
EPSS 0.00
CVE-2021-25219 MEDIUM
BIND 9.3.0-9.17.18 - Denial of Service via Lame Cache Exploitation
Oct 27, 2021
CVSS 5.3
EPSS 0.01
CVE-2021-25218 HIGH
BIND 9.16.19 9.17.16 and 9.16.19-S1 - Reachable Assertion
Aug 18, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-25217 HIGH
ISC DHCP <4.1-ESV-R16, 4.4.0-4.4.2 - Info Disclosure
May 26, 2021
CVSS 7.4
EPSS 0.00
CVE-2021-25216 HIGH
BIND GSS-TSIG - Denial of Service or Code Execution via SPNEGO Parsing
Apr 29, 2021
CVSS 8.1
EPSS 0.28
CVE-2021-25215 HIGH
BIND <9.11.30-9.17.12 - DoS
Apr 29, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-25214 MEDIUM
BIND 9.8.5-9.8.8, 9.9.3-9.11.29, 9.12.0-9.16.13, 9.17.0-9.17.11 - DoS via Malformed IXFR
Apr 29, 2021
CVSS 6.5
EPSS 0.01
CVE-2020-8625 HIGH
BIND 9.5.0-9.11.27, 9.12.0-9.16.11, 9.17.0-9.17.1 - Buffer Overflow via GSS-TSIG Configuration
Feb 17, 2021
CVSS 8.1
EPSS 0.25
CVE-2020-8624 MEDIUM
BIND <9.16.5 - Privilege Escalation
Aug 21, 2020
CVSS 4.3
EPSS 0.02
CVE-2020-8623 HIGH
BIND 9.10.0-9.11.21, 9.12.0-9.16.5, 9.17.0-9.17.3 - Reachable Assertion via Crafted Query Packet
Aug 21, 2020
CVSS 7.5
EPSS 0.18
CVE-2020-8622 MEDIUM
BIND 9.0.0-9.11.21, 9.12.0-9.16.5, 9.17.0-9.17.3 - Reachable Assertion via Truncated TSIG Response
Aug 21, 2020
CVSS 6.5
EPSS 0.03
CVE-2020-8621 HIGH
BIND 9.14.0-9.16.5, 9.17.0-9.17.3 - DoS
Aug 21, 2020
CVSS 7.5
EPSS 0.05
CVE-2020-8620 HIGH
BIND 9.15.6-9.16.5 and 9.17.0-9.17.3 - Reachable Assertion via TCP Connection
Aug 21, 2020
CVSS 7.5
EPSS 0.08
CVE-2020-8619 MEDIUM
ISC BIND 9.11.14-9.11.19, 9.14.9-9.14.12, 9.16.0-9.16.3 - Denial of Service via Empty Non-Terminal Entry
Jun 17, 2020
CVSS 4.9
EPSS 0.07
CVE-2020-8618 MEDIUM
BIND >=9.16.0 <9.16.3 - Denial of Service via Zone Transfer Assertion Failure
Jun 17, 2020
CVSS 4.9
EPSS 0.01
CVE-2020-8617 HIGH
BIND 9.0.0-9.11.17 - Denial of Service via TSIG Key Assertion Failure
May 19, 2020
CVSS 7.5
EPSS 0.93