VYPR
← Isc

Vendor CVEs

Isc

All CVEs

277 total · sorted by risk
  • CVE-2015-8000Dec 16, 2015
    Isc
    Bind
    risk 0.04cvss —epss 0.55

    db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a malformed class attribute.

  • CVE-2012-3571Jul 25, 2012
    Isc
    DHCP
    risk 0.04cvss —epss 0.13

    ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed client identifier.

  • CVE-2009-0696Jul 29, 2009
    Isc
    Bind
    risk 0.04cvss —epss 0.13

    The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the…

  • CVE-2007-2930Sep 12, 2007
    Isc
    Bind
    risk 0.04cvss —epss 0.08

    The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS…

  • CVE-2007-2926Jul 24, 2007
    Isc
    Bind
    risk 0.04cvss —epss 0.13

    ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache…

  • CVE-2004-0460Aug 6, 2004
    Isc
    DHCP
    risk 0.04cvss —epss 0.45

    Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3)…

  • CVE-2002-1220Nov 29, 2002
    BIND
    BIND
    risk 0.04cvss —epss 0.10

    BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subdomain that does not exist, with an OPT resource record with a large UDP payload size.

  • CVE-2000-1029Dec 11, 2000
    Isc
    Bind
    risk 0.04cvss —epss 0.14

    Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query.

  • CVE-1999-0848Nov 10, 1999
    Isc
    Bind
    risk 0.04cvss —epss 0.06

    Denial of service in BIND named via consuming more than "fdmax" file descriptors.

  • CVE-2015-5722Sep 5, 2015
    Isc
    Bind
    risk 0.03cvss —epss 0.34

    buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.

  • CVE-2015-4620Jul 8, 2015
    Isc
    Bind
    risk 0.03cvss —epss 0.38

    name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC validation, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) by constructing crafted…

  • CVE-2014-0591Jan 14, 2014
    Isc
    Bind
    risk 0.03cvss —epss 0.32

    The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS…

  • CVE-2013-4854Jul 29, 2013
    Isc
    Bind
    risk 0.03cvss —epss 0.34

    The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon…

  • CVE-2013-2266Mar 28, 2013
    Isc
    Bind
    risk 0.03cvss —epss 0.43

    libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a…

  • CVE-2012-5166Oct 10, 2012
    Isc
    Bind
    risk 0.03cvss —epss 0.34

    ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service (named daemon hang) via unspecified combinations of resource records.

  • CVE-2012-4244Sep 14, 2012
    Isc
    Bind
    risk 0.03cvss —epss 0.37

    ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a long resource record.

  • CVE-2011-2749Aug 15, 2011
    Isc
    DHCP
    risk 0.03cvss —epss 0.39

    The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted BOOTP packet.

  • CVE-2011-2748Aug 15, 2011
    Isc
    DHCP
    risk 0.03cvss —epss 0.39

    The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted DHCP packet.

  • CVE-2011-0413Jan 31, 2011
    Isc
    DHCP
    risk 0.03cvss —epss 0.33

    The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) by sending a message over IPv6 for a declined and abandoned…

  • CVE-2007-0494Jan 25, 2007
    Isc
    Bind
    risk 0.03cvss —epss 0.43

    ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (exit) via a type * (ANY) DNS query response that contains multiple RRsets,…

  • CVE-2002-0525Aug 12, 2002
    Isc
    Inn
    risk 0.03cvss —epss 0.04

    Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses.

  • CVE-2001-1442Apr 21, 2001
    Isc
    Inn
    risk 0.03cvss —epss 0.02

    Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument.

  • CVE-2000-0472Feb 6, 2000
    Isc
    Inn
    risk 0.03cvss —epss 0.04

    Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID.

  • CVE-1999-0705Sep 1, 1999
    Isc
    Inn
    risk 0.03cvss —epss 0.05

    Buffer overflow in INN inews program.

  • CVE-1999-1499Apr 10, 1998
    Isc
    Bind
    risk 0.03cvss —epss 0.01

    named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) named.stats when SIGIOT is used.

  • CVE-2015-5986Sep 5, 2015
    Isc
    Bind
    risk 0.02cvss —epss 0.26

    openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted DNS response.

  • CVE-2015-1349Feb 19, 2015
    Isc
    Bind
    risk 0.02cvss —epss 0.22

    named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit, or daemon crash) by triggering an…

  • CVE-2012-3955Sep 14, 2012
    Isc
    DHCP
    risk 0.02cvss —epss 0.22

    ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circumstances by establishing an IPv6 lease in an environment where the lease expiration time is later reduced.

  • CVE-2012-3817Jul 25, 2012
    Isc
    Bind
    risk 0.02cvss —epss 0.27

    ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does not properly initialize the failing-query cache, which allows remote attackers to cause a denial of…

  • CVE-2011-2464Jul 8, 2011
    Isc
    Bind
    risk 0.02cvss —epss 0.19

    Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named daemon crash) via a crafted UPDATE request.

  • CVE-2011-1910May 31, 2011
    Isc
    Bind
    risk 0.02cvss —epss 0.25

    Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large…

  • CVE-2003-0026Jan 17, 2003
    Isc
    DHCP
    risk 0.02cvss —epss 0.19

    Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.

  • CVE-2014-8680Dec 11, 2014
    Isc
    Bind
    risk 0.01cvss —epss 0.09

    The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service (assertion failure and named exit) via vectors related to (1) the lack of GeoIP databases for both IPv4 and IPv6, or (2) IPv6 support with certain options.

  • CVE-2014-3859Jun 13, 2014
    Isc
    Bind
    risk 0.01cvss —epss 0.07

    libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted packet, as demonstrated by an attack against named, dig, or delv.

  • CVE-2014-3214May 9, 2014
    Isc
    Bind
    risk 0.01cvss —epss 0.17

    The prefetch implementation in named in ISC BIND 9.10.0, when a recursive nameserver is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a DNS query that triggers a response with unspecified attributes.

  • CVE-2012-5689Jan 25, 2013
    Isc
    Bind
    risk 0.01cvss —epss 0.12

    ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an…

  • CVE-2012-5688Dec 6, 2012
    Isc
    Bind
    risk 0.01cvss —epss 0.11

    ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.

  • CVE-2012-1667Jun 5, 2012
    Isc
    Bind
    risk 0.01cvss —epss 0.13

    ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data…

  • CVE-2012-1033Feb 8, 2012
    Isc
    Bind
    risk 0.01cvss —epss 0.14

    The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names"…

  • CVE-2011-4539Dec 8, 2011
    Isc
    DHCP
    risk 0.01cvss —epss 0.15

    dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service (daemon crash) via a crafted request packet.

  • CVE-2011-4313Nov 29, 2011
    Isc
    Bind
    risk 0.01cvss —epss 0.16

    query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors…

  • CVE-2011-2465Jul 8, 2011
    Isc
    Bind
    risk 0.01cvss —epss 0.09

    Unspecified vulnerability in ISC BIND 9 9.8.0, 9.8.0-P1, 9.8.0-P2, and 9.8.1b1, when recursion is enabled and the Response Policy Zone (RPZ) contains DNAME or certain CNAME records, allows remote attackers to cause a denial of service (named daemon crash) via an unspecified…

  • CVE-2011-0414Feb 23, 2011
    Isc
    Bind
    risk 0.01cvss —epss 0.14

    ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cause a denial of service (deadlock and daemon hang) by sending a query at the time of (1) an IXFR transfer or (2) a DDNS update.

  • CVE-2010-3616Dec 17, 2010
    Isc
    DHCP
    risk 0.01cvss —epss 0.08

    ISC DHCP server 4.2 before 4.2.0-P2, when configured to use failover partnerships, allows remote attackers to cause a denial of service (communications-interrupted state and DHCP client service loss) by connecting to a port that is only intended for a failover peer, as…

  • CVE-2010-3615Dec 6, 2010
    Isc
    Bind
    risk 0.01cvss —epss 0.10

    named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via the standard DNS query mechanism.

  • CVE-2010-3614Dec 6, 2010
    Isc
    Bind
    risk 0.01cvss —epss 0.14

    named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, which might allow remote attackers to cause a denial of…

  • CVE-2010-3613Dec 6, 2010
    Isc
    Bind
    risk 0.01cvss —epss 0.09

    named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service (daemon…

  • CVE-2010-3611Nov 4, 2010
    Isc
    DHCP
    risk 0.01cvss —epss 0.09

    ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field.

  • CVE-2010-3762Oct 5, 2010
    Isc
    Bind
    risk 0.01cvss —epss 0.08

    ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote attackers to cause a denial of service (daemon crash) via a DNS query.

  • CVE-2010-0213Jul 28, 2010
    Isc
    Bind
    risk 0.01cvss —epss 0.07

    BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to cause a denial of service (infinite loop) via a query for an RRSIG record whose answer is not in the…

Page 4 of 6