ISC vulnerabilities
134 CVEs and advisories name ISC as an affected vendor, newest first. Follow it as a feed.
- CVE-2018-5737BIND 9.12's serve-stale implementation can cause an assertion failure in rbtdb.c or other undesirable behavior, even if serve-stale is not enabled.
- CVE-2018-5734A malformed request can trigger an assertion failure in badcache.c
- CVE-2018-5733A malicious client can overflow a reference counter in ISC dhcpd
- CVE-2017-3145Improper fetch cleanup sequencing in the resolver can cause named to crash
- CVE-2017-3144Failure to properly clean up closed OMAPI connections can exhaust available sockets
- CVE-2017-3143An error in TSIG authentication can permit unauthorized dynamic updates
- CVE-2017-3142An error in TSIG authentication can permit unauthorized zone transfers
- CVE-2017-3141Windows service and uninstall paths are not quoted when BIND is installed
- CVE-2017-3140An error processing RPZ rules can cause named to loop endlessly after handling a query
- CVE-2017-3138named exits with a REQUIRE assertion failure if it receives a null command string on its control channel
- CVE-2017-3137A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME
- CVE-2017-3136An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"
- CVE-2017-3135Combination of DNS64 and RPZ Can Lead to Crash
- CVE-2016-9778An error handling certain queries using the nxdomain-redirect feature could cause a REQUIRE assertion failure in db.c