Bind

CVEs (211)

• CVE-2009-4022Nov 25, 2009
  Isc

  Bind
  risk 0.01cvss —epss 0.08

  Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by…

• CVE-2009-0025Jan 7, 2009
  Isc

  Bind
  risk 0.01cvss —epss 0.07

  BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.

• CVE-2008-0122Jan 16, 2008
  Isc

  Bind
  risk 0.01cvss —epss 0.12

  Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that…

• CVE-2007-2241May 2, 2007
  Isc

  Bind
  risk 0.01cvss —epss 0.08

  Unspecified vulnerability in query.c in ISC BIND 9.4.0, and 9.5.0a1 through 9.5.0a3, when recursion is enabled, allows remote attackers to cause a denial of service (daemon exit) via a sequence of queries processed by the query_addsoa function.

• CVE-2007-0493Jan 25, 2007
  Isc

  Bind
  risk 0.01cvss —epss 0.12

  Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (named daemon crash) via unspecified vectors that cause named to "dereference a…

• CVE-2006-4096Sep 6, 2006
  Isc

  Bind
  risk 0.01cvss —epss 0.08

  BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty.

• CVE-2006-2073Apr 27, 2006
  Isc

  Bind
  risk 0.01cvss —epss 0.08

  Unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service via a crafted DNS message with a "broken" TSIG, as demonstrated by the OUSPG PROTOS DNS test suite.

• CVE-2006-0527Feb 2, 2006
  BIND

  BIND
  risk 0.01cvss —epss 0.08

  BIND 4 (BIND4) and BIND 8 (BIND8), if used as a target forwarder, allows remote attackers to gain privileged access via a "Kashpureff-style DNS cache corruption" attack.

• CVE-2005-0033May 2, 2005
  Isc

  Bind
  risk 0.01cvss —epss 0.11

  Buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote attackers to cause a denial of service (crash) via queries that trigger the overflow in the q_usedns array that tracks nameservers and addresses.

• CVE-2005-0034May 2, 2005
  Isc

  Bind
  risk 0.01cvss —epss 0.06

  An "incorrect assumption" in the authvalidated validator function in BIND 9.3.0, when DNSSEC is enabled, allows remote attackers to cause a denial of service (named server exit) via crafted DNS packets that cause an internal consistency test (self-check) to fail.

• CVE-2002-2211Dec 31, 2002
  Isc

  Bind
  risk 0.01cvss —epss 0.08

  BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases…

• CVE-2002-0029Nov 29, 2002
  Isc

  Bind
  risk 0.01cvss —epss 0.10

  Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote attackers to execute arbitrary code via DNS server responses that trigger the overflow in the (1) getnetbyname, or (2)…

• CVE-2002-1219Nov 29, 2002
  Isc

  Bind
  risk 0.01cvss —epss 0.12

  Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records (RR).

• CVE-2002-1221Nov 29, 2002
  Isc

  Bind
  risk 0.01cvss —epss 0.08

  BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed from the internal BIND database and later cause a null dereference.

• CVE-2002-0651Jul 3, 2002
  Isc

  Bind
  risk 0.01cvss —epss 0.13

  Buffer overflow in the DNS resolver code used in libc, glibc, and libbind, as derived from ISC BIND, allows remote malicious DNS servers to cause a denial of service and possibly execute arbitrary code via the stub resolvers.

• CVE-2002-0400Jun 18, 2002
  Isc

  Bind
  risk 0.01cvss —epss 0.14

  ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka…

• CVE-2001-0013Feb 12, 2001
  Isc

  Bind
  risk 0.01cvss —epss 0.11

  Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.

• CVE-2001-0011Feb 12, 2001
  Isc

  Bind
  risk 0.01cvss —epss 0.08

  Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.

• CVE-2000-0888Dec 19, 2000
  Isc

  Bind
  risk 0.01cvss —epss 0.08

  named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug."

• CVE-2026-13321HigJul 22, 2026
  Isc

  Bind
  risk 0.00cvss 8.6epss 0.00

  The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1…