Product by ISC
ISC BIND 9
212 known vulnerabilities in ISC BIND 9 (ISC), 1 of them actively exploited (CISA KEV).
Key figures
212
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2015-5477 | ISC BIND Data Processing Errors Vulnerability In CISA KEValso in 19 other products | 7.5 | |
| High | CVE-2026-77692 | Unauthenticated remote crash of named via a single DoH SIG(0) request | 7.5 | |
| High | CVE-2025-13878 | Malformed BRID/HHIT records can cause named to terminate unexpectedly | 7.5 | |
| High | CVE-2023-50387 | ISC BIND 9: Denial of Service | 7.5 | |
| High | CVE-2016-1286 | ISC BIND 9: Denial of Service | 8.6 | |
| High | CVE-2023-50868 | ISC BIND 9: Denial of Service | 7.5 | |
| Critical | CVE-2021-25216 | ISC BIND9: Buffer Overflow | 8.1 | |
| High | CVE-2020-8625 | ISC BIND9: Buffer Overflow | 8.1 | |
| High | CVE-2022-3736 | ISC BIND 9: security vulnerability | 7.5 | |
| High | CVE-2020-8617 | ISC BIND9: security vulnerability | 7.5 | |
| High | CVE-2016-2776 | ISC BIND 9: Denial of Service | 7.5 | |
| High | CVE-2020-8616 | BIND does not sufficiently limit the number of fetches performed when processing referrals | 8.6 | |
| High | CVE-2018-5740 | A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named | 7.5 | |
| High | CVE-2022-3488 | ISC BIND 9: security vulnerability | 7.5 | |
| High | CVE-2016-9131 | ISC BIND 9: Denial of Service | 7.5 | |
| High | CVE-2016-8864 | ISC BIND 9: Denial of Service | 7.5 | |
| High | CVE-2022-3924 | ISC BIND 9: security vulnerability | 7.5 | |
| High | CVE-2017-3145 | Improper fetch cleanup sequencing in the resolver can cause named to crash | 7.5 | |
| High | CVE-2016-2848 | ISC BIND 9: Denial of Service | 7.5 | |
| High | CVE-2016-9147 | ISC BIND 9: Denial of Service | 7.5 | |
| High | CVE-2022-3094 | An UPDATE message flood may cause named to exhaust all available memory | 7.5 | |
| Medium | CVE-2008-1447 | ISC BIND 9: security vulnerability | 6.8 | |
| High | CVE-2017-3143 | An error in TSIG authentication can permit unauthorized dynamic updates | 7.5 | |
| High | CVE-2016-9444 | ISC BIND 9: Denial of Service | 7.5 | |
| High | CVE-2017-3135 | Combination of DNS64 and RPZ Can Lead to Crash | 7.5 |