ISC vulnerabilities
134 CVEs and advisories name ISC as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-5679Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution
- CVE-2023-5517Querying RFC 1918 reverse zones may cause an assertion failure when "nxdomain-redirect" is enabled
- CVE-2023-4408Parsing large DNS messages may cause excessive CPU load
- CVE-2023-4236named may terminate unexpectedly under high DNS-over-TLS query load
- CVE-2023-3341A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly
- CVE-2023-2911Exceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0
- CVE-2023-2829Malformed NSEC records can cause named to terminate unexpectedly when synth-from-dnssec is enabled
- CVE-2023-2828named's configured cache size limit can be significantly exceeded
- CVE-2022-3924named configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quota
- CVE-2022-3736named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries
- CVE-2022-3488named may terminate unexpectedly when processing ECS options in repeated responses to iterative queries
- CVE-2022-3094An UPDATE message flood may cause named to exhaust all available memory
- CVE-2022-2929DHCP memory leak
- CVE-2022-2928An option refcount overflow exists in dhcpd
- CVE-2022-3080BIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedly
- CVE-2022-38178Memory leaks in EdDSA DNSSEC verification code
- CVE-2022-38177Memory leak in ECDSA DNSSEC verification code
- CVE-2022-2906Memory leaks in code handling Diffie-Hellman key exchange via TKEY RRs (OpenSSL 3.0.0+ only)
- CVE-2022-2881Buffer overread in statistics channel code
- CVE-2022-2795Processing large delegations may severely degrade resolver performance
- CVE-2022-1183Destroying a TLS session early causes assertion failure
- CVE-2021-25220DNS forwarders - cache poisoning vulnerability
- CVE-2022-0635Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually t
- CVE-2022-0396DoS from specifically crafted TCP packets
- CVE-2022-0667Assertion failure on delayed DS lookup
- CVE-2021-25219Lame cache can be abused to severely degrade resolver performance
- CVE-2021-25218A too-strict assertion check could be triggered when responses in BIND 9.16.19 and 9.17.16 require UDP fragmentation if RRL is in use
- CVE-2021-25217A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient
- CVE-2021-25216A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack
- CVE-2021-25215An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself