ISC vulnerabilities
134 CVEs and advisories name ISC as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-97313Specific RPZ configurations and query patterns may result in an unexpected exit
- CVE-2026-96888Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization
- CVE-2026-94300Concurrent GSS-TSIG messages corrupt memory
- CVE-2026-19630Amplified resource exhaustion in inbound message processing
- CVE-2026-77119NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets
- CVE-2026-75029Message parser retains every identical singleton RDATA, enabling wire-to-work amplification
- CVE-2026-19668Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching
- CVE-2026-19033Unauthenticated IXFR deltas are applied to the live zone before TSIG verification
- CVE-2026-80274Validating resolver can abort while caching a mismatched NOQNAME proof
- CVE-2026-76163named aborts on a TKEY query when the user configuration has no global options statement
- CVE-2026-19666Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path
- CVE-2026-81563SVCB AliasMode additional-data error leaks qpcache references
- CVE-2026-78301Out-of-zone database nodes can become authoritative zone cuts
- CVE-2026-77692Unauthenticated remote crash of named via a single DoH SIG(0) request
- CVE-2026-19941checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proof
- CVE-2026-19662qpcache NOQNAME proof use-after-free crashes recursive resolver
- CVE-2026-19667Remote assertion failure via 16-bit length truncation in `dns_ncache_add()`
- CVE-2026-81736Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees
- CVE-2026-13321DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field
- CVE-2026-13204Unexpected exit in certain situations with NSEC and NSEC3 both present
- CVE-2026-12617Record ordering based unexpected exit with CNAME or DNAME
- CVE-2026-11721Cache poisoning possible with label count discrepancy, RRSIG, and wildcards
- CVE-2026-11622Potential memory usage beyond configured limits
- CVE-2026-11605Unnecessary validation of DNSSEC signed records
- CVE-2026-11331Potential wildcard CNAME RPZ policy bypass
- CVE-2026-10822Key Record using PRIVATEDNS algorithm may lead to unexpected exit
- CVE-2026-10723Incorrect acceptance of NSEC3 records
- CVE-2026-5950Unbounded resend loop in BIND 9 resolver
- CVE-2026-5947SIG(0) validation during query flood may lead to undefined behavior
- CVE-2026-5946Invalid handling of CLASS != IN