ISC vulnerabilities
134 CVEs and advisories name ISC as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-3593Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation
- CVE-2026-3592Amplification vulnerabilities via self-pointed glue records
- CVE-2026-3039BIND 9 server memory exhaustion during GSS-API TKEY negotiation
- CVE-2026-3591A stack use-after-return flaw in SIG(0) handling code may enable ACL bypass
- CVE-2026-3119Authenticated query containing a TKEY record may cause named to terminate unexpectedly
- CVE-2026-3104Memory leak in code preparing DNSSEC proofs of non-existence
- CVE-2026-1519Excessive NSEC3 iterations cause high CPU load during insecure delegation validation
- CVE-2026-3608Stack overflow in Kea daemons
- CVE-2025-13878Malformed BRID/HHIT records can cause named to terminate unexpectedly
- CVE-2025-11232Invalid characters cause assert
- CVE-2025-40780Cache poisoning due to weak PRNG
- CVE-2025-40778Cache poisoning attacks with unsolicited RRs
- CVE-2025-8677Resource exhaustion via malformed DNSKEY handling
- CVE-2025-8696DoS attack against the Stork UI from an unauthenticated user
- CVE-2025-40779Kea crash upon interaction between specific client options and subnet selection
- CVE-2025-40777A possible assertion failure when 'stale-answer-client-timeout' is set to '0'
- CVE-2025-40776Birthday Attack against Resolvers supporting ECS
- CVE-2025-32803Insecure file permissions can result in confidential information leakage
- CVE-2025-32802Insecure handling of file paths allows multiple local attacks
- CVE-2025-32801Loading a malicious hook library can lead to local privilege escalation
- CVE-2025-40775DNS message with invalid TSIG causes an assertion failure
- CVE-2024-12705DNS-over-HTTPS implementation suffers from multiple issues under heavy query load
- CVE-2024-11187Many records in the additional section cause CPU exhaustion
- CVE-2024-4076Assertion failure when serving both stale cache data and authoritative zone content
- CVE-2024-1975SIG(0) can be used to exhaust CPU resources
- CVE-2024-1737BIND's database will be slow if a very large number of RRs exist at the same name
- CVE-2024-0760A flood of DNS messages over TCP may make the server unstable
- CVE-2024-28872Incorrect TLS certificate validation can lead to escalated privileges
- CVE-2023-6516Specific recursive query patterns may lead to an out-of-memory condition
- CVE-2023-5680Cleaning an ECS-enabled cache may cause excessive CPU load