ISC vulnerabilities
134 CVEs and advisories name ISC as an affected vendor, newest first. Follow it as a feed.
- CVE-2021-25214A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly
- CVE-2020-8625A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack
- CVE-2020-8624update-policy rules of type "subdomain" are enforced incorrectly
- CVE-2020-8623A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c
- CVE-2020-8622A truncated TSIG response can lead to an assertion failure
- CVE-2020-8621Attempting QNAME minimization after forwarding can lead to an assertion failure in resolver.c
- CVE-2020-8620In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data on that connection
- CVE-2020-8619A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer
- CVE-2020-8618A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer
- CVE-2020-8617A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c
- CVE-2020-8616BIND does not sufficiently limit the number of fetches performed when processing referrals
- CVE-2019-6477TCP-pipelined queries can bypass tcp-clients limit
- CVE-2019-6476An error in QNAME minimization code can cause BIND to exit with an assertion failure
- CVE-2019-6475A flaw in mirror zone validity checking can allow zone data to be spoofed
- CVE-2019-6474A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate
- CVE-2019-6473A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate
- CVE-2019-6472A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate
- CVE-2019-6471A race condition when discarding malformed packets can cause BIND to exit with an assertion failure
- CVE-2019-6469BIND Supported Preview Edition can exit with an assertion failure if ECS is in use
- CVE-2019-6468BIND Supported Preview Edition can exit with an assertion failure if nxdomain-redirect is used
- CVE-2019-6467An error in the nxdomain redirect feature can cause BIND to exit with an INSIST assertion failure in query.c
- CVE-2019-6465Zone transfer controls for writable DLZ zones were not effective
- CVE-2018-5745An assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys
- CVE-2018-5744A specially crafted packet can cause named to leak memory
- CVE-2018-5743Limiting simultaneous TCP clients was ineffective
- CVE-2018-5732A specially constructed response from a malicious server can cause a buffer overflow in dhclient
- CVE-2018-5741Update policies krb5-subdomain and ms-subdomain do not enforce controls promised in their documentation
- CVE-2018-5740A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named
- CVE-2018-5739Failure to release memory may exhaust system resources
- CVE-2018-5738Some versions of BIND can improperly permit recursive query service to unauthorized clients