Product by ISC
ISC BIND9
77 known vulnerabilities in ISC BIND9 (ISC), 0 of them actively exploited (CISA KEV).
Key figures
77
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-77692 | Unauthenticated remote crash of named via a single DoH SIG(0) request | 7.5 | |
| High | CVE-2025-13878 | Malformed BRID/HHIT records can cause named to terminate unexpectedly | 7.5 | |
| High | CVE-2025-8677 | Resource exhaustion via malformed DNSKEY handling | 7.5 | |
| High | CVE-2023-50387 | ISC BIND 9: Denial of Service | 7.5 | |
| High | CVE-2023-50868 | ISC BIND 9: Denial of Service | 7.5 | |
| High | CVE-2024-12705 | DNS-over-HTTPS implementation suffers from multiple issues under heavy query load | 7.5 | |
| High | CVE-2024-11187 | Many records in the additional section cause CPU exhaustion | 7.5 | |
| Critical | CVE-2021-25216 | ISC BIND9: Buffer Overflow | 8.1 | |
| High | CVE-2020-8625 | ISC BIND9: Buffer Overflow | 8.1 | |
| High | CVE-2022-3736 | ISC BIND 9: security vulnerability | 7.5 | |
| High | CVE-2020-8617 | ISC BIND9: security vulnerability | 7.5 | |
| High | CVE-2020-8616 | BIND does not sufficiently limit the number of fetches performed when processing referrals | 8.6 | |
| High | CVE-2022-3924 | ISC BIND 9: security vulnerability | 7.5 | |
| High | CVE-2022-3094 | An UPDATE message flood may cause named to exhaust all available memory | 7.5 | |
| High | CVE-2021-25215 | ISC BIND9: security vulnerability | 7.5 | |
| High | CVE-2022-1183 | Destroying a TLS session early causes assertion failure | 7.5 | |
| High | CVE-2020-8623 | A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c | 7.5 | |
| High | CVE-2026-5946 | Invalid handling of CLASS != IN | 7.5 | |
| High | CVE-2023-2828 | named's configured cache size limit can be significantly exceeded | 7.5 | |
| High | CVE-2019-6477 | TCP-pipelined queries can bypass tcp-clients limit | 7.5 | |
| Medium | CVE-2021-25214 | A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly | 6.5 | |
| High | CVE-2020-8620 | ISC BIND9: security vulnerability | 7.5 | |
| Medium | CVE-2020-8622 | A truncated TSIG response can lead to an assertion failure | 6.5 | |
| High | CVE-2021-25218 | ISC BIND9: security vulnerability | 7.5 | |
| High | CVE-2023-3341 | A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly | 7.5 |