ISC BIND 9.11.27

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs

A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack

Published 2021-04-29 · Modified

9.8EPSS 0.824

A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack

Published 2021-02-17 · Modified

8.1EPSS 0.642

An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself

Published 2021-04-29 · Modified

7.5EPSS 0.114

Memory leak in ECDSA DNSSEC verification code

Published 2022-09-21 · Modified

7.5EPSS 0.032

Memory leaks in EdDSA DNSSEC verification code

Published 2022-09-21 · Modified

7.5EPSS 0.030

A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly

Published 2023-09-20 · Modified

7.5EPSS 0.029

A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly

Published 2021-04-29 · Modified

6.5EPSS 0.060

Lame cache can be abused to severely degrade resolver performance

Published 2021-10-27 · Modified

5.3EPSS 0.106

Processing large delegations may severely degrade resolver performance

Published 2022-09-21 · Modified

5.3EPSS 0.022

Cleaning an ECS-enabled cache may cause excessive CPU load

Published 2024-02-13 · Modified

5.3EPSS 0.006