# ISC BIND 9. Every CVE that names ISC BIND 9 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [named configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quota](https://agentprime.io/advisories/CVE-2022-3924.md) `CVE-2022-3924` · CVE record: ISC BIND 9 · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.16 · Not analysed yet · Published 25 Jan 2023 · Tags: Denial of service - [named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries](https://agentprime.io/advisories/CVE-2022-3736.md) `CVE-2022-3736` · CVE record: ISC BIND 9 · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.48 · Not analysed yet · Published 25 Jan 2023 · Tags: CWE-20 - [named may terminate unexpectedly when processing ECS options in repeated responses to iterative queries](https://agentprime.io/advisories/CVE-2022-3488.md) `CVE-2022-3488` · CVE record: ISC BIND 9 · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.19 · Not analysed yet · Published 25 Jan 2023 · Tags: Denial of service - [An UPDATE message flood may cause named to exhaust all available memory](https://agentprime.io/advisories/CVE-2022-3094.md) `CVE-2022-3094` · CVE record: ISC BIND 9 · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 25 Jan 2023 · Tags: Denial of service - [An error in QNAME minimization code can cause BIND to exit with an assertion failure](https://agentprime.io/advisories/CVE-2019-6476.md) `CVE-2019-6476` · CVE record: ISC BIND 9 · CVSS 5.9 Medium · Not analysed yet · Published 17 Oct 2019 - [A flaw in mirror zone validity checking can allow zone data to be spoofed](https://agentprime.io/advisories/CVE-2019-6475.md) `CVE-2019-6475` · CVE record: ISC BIND 9 · CVSS 5.9 Medium · Not analysed yet · Published 17 Oct 2019 - [A race condition when discarding malformed packets can cause BIND to exit with an assertion failure](https://agentprime.io/advisories/CVE-2019-6471.md) `CVE-2019-6471` · CVE record: ISC BIND 9 · CVSS 5.9 Medium · Not analysed yet · Published 9 Oct 2019 - [An error in the nxdomain redirect feature can cause BIND to exit with an INSIST assertion failure in query.c](https://agentprime.io/advisories/CVE-2019-6467.md) `CVE-2019-6467` · CVE record: ISC BIND 9 · CVSS 5.9 Medium · Not analysed yet · Published 9 Oct 2019 - [Zone transfer controls for writable DLZ zones were not effective](https://agentprime.io/advisories/CVE-2019-6465.md) `CVE-2019-6465` · CVE record: ISC BIND 9 · CVSS 5.3 Medium · Not analysed yet · Published 9 Oct 2019 - [An assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys](https://agentprime.io/advisories/CVE-2018-5745.md) `CVE-2018-5745` · CVE record: ISC BIND 9 · CVSS 4.9 Medium · Not analysed yet · Published 9 Oct 2019 - [A specially crafted packet can cause named to leak memory](https://agentprime.io/advisories/CVE-2018-5744.md) `CVE-2018-5744` · CVE record: ISC BIND 9 · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2019 - [Limiting simultaneous TCP clients was ineffective](https://agentprime.io/advisories/CVE-2018-5743.md) `CVE-2018-5743` · CVE record: ISC BIND 9 · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2019 - [Update policies krb5-subdomain and ms-subdomain do not enforce controls promised in their documentation](https://agentprime.io/advisories/CVE-2018-5741.md) `CVE-2018-5741` · CVE record: ISC BIND 9 · CVSS 6.5 Medium · Not analysed yet · Published 16 Jan 2019 - [A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named](https://agentprime.io/advisories/CVE-2018-5740.md) `CVE-2018-5740` · CVE record: ISC BIND 9 · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.60 · Not analysed yet · Published 16 Jan 2019 - [Some versions of BIND can improperly permit recursive query service to unauthorized clients](https://agentprime.io/advisories/CVE-2018-5738.md) `CVE-2018-5738` · CVE record: ISC BIND 9 · CVSS 5.3 Medium · EPSS 0.11 · Not analysed yet · Published 16 Jan 2019 - [BIND 9.12's serve-stale implementation can cause an assertion failure in rbtdb.c or other undesirable behavior, even if serve-stale is not enabled.](https://agentprime.io/advisories/CVE-2018-5737.md) `CVE-2018-5737` · CVE record: ISC BIND 9 · CVSS 5.9 Medium · EPSS 0.11 · Not analysed yet · Published 16 Jan 2019 - [A malformed request can trigger an assertion failure in badcache.c](https://agentprime.io/advisories/CVE-2018-5734.md) `CVE-2018-5734` · CVE record: ISC BIND 9 · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2019 - [Improper fetch cleanup sequencing in the resolver can cause named to crash](https://agentprime.io/advisories/CVE-2017-3145.md) `CVE-2017-3145` · CVE record: ISC BIND 9 · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.28 · Not analysed yet · Published 16 Jan 2019 - [An error in TSIG authentication can permit unauthorized dynamic updates](https://agentprime.io/advisories/CVE-2017-3143.md) `CVE-2017-3143` · CVE record: ISC BIND 9 · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.18 · Not analysed yet · Published 16 Jan 2019 - [An error in TSIG authentication can permit unauthorized zone transfers](https://agentprime.io/advisories/CVE-2017-3142.md) `CVE-2017-3142` · CVE record: ISC BIND 9 · CVSS 5.3 Medium · Not analysed yet · Published 16 Jan 2019 - [Windows service and uninstall paths are not quoted when BIND is installed](https://agentprime.io/advisories/CVE-2017-3141.md) `CVE-2017-3141` · CVE record: ISC BIND 9 · CVSS 7.2 High · Not analysed yet · Published 16 Jan 2019 - [An error processing RPZ rules can cause named to loop endlessly after handling a query](https://agentprime.io/advisories/CVE-2017-3140.md) `CVE-2017-3140` · CVE record: ISC BIND 9 · CVSS 3.7 Low · EPSS 0.12 · Not analysed yet · Published 16 Jan 2019 - [named exits with a REQUIRE assertion failure if it receives a null command string on its control channel](https://agentprime.io/advisories/CVE-2017-3138.md) `CVE-2017-3138` · CVE record: ISC BIND 9 · CVSS 6.5 Medium · Not analysed yet · Published 16 Jan 2019 - [A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME](https://agentprime.io/advisories/CVE-2017-3137.md) `CVE-2017-3137` · CVE record: ISC BIND 9 · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2019 - [An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"](https://agentprime.io/advisories/CVE-2017-3136.md) `CVE-2017-3136` · CVE record: ISC BIND 9 · CVSS 5.9 Medium · EPSS 0.11 · Not analysed yet · Published 16 Jan 2019 - [Combination of DNS64 and RPZ Can Lead to Crash](https://agentprime.io/advisories/CVE-2017-3135.md) `CVE-2017-3135` · CVE record: ISC BIND 9 · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.17 · Not analysed yet · Published 16 Jan 2019 - [An error handling certain queries using the nxdomain-redirect feature could cause a REQUIRE assertion failure in db.c](https://agentprime.io/advisories/CVE-2016-9778.md) `CVE-2016-9778` · CVE record: ISC BIND 9 · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2019 Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .