Vulnerabilities in ISC
134 resultsCVE-2023-4236HIGHnamed may terminate unexpectedly under high DNS-over-TLS query loadEPSS 2.2%CVE-2020-8619MEDIUMA buffer boundary check assertion in rdataset.c can fail incorrectly during zone transferEPSS 2.1%CVE-2024-1975HIGHSIG(0) can be used to exhaust CPU resourcesEPSS 2.1%CVE-2024-1737HIGHBIND's database will be slow if a very large number of RRs exist at the same nameEPSS 2.1%CVE-2024-4076HIGHAssertion failure when serving both stale cache data and authoritative zone contentEPSS 2.1%CVE-2022-2906HIGHMemory leaks in code handling Diffie-Hellman key exchange via TKEY RRs (OpenSSL 3.0.0+ only)EPSS 2.0%CVE-2022-3080HIGHBIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedlyEPSS 2.0%CVE-2019-6469MEDIUMBIND Supported Preview Edition can exit with an assertion failure if ECS is in useEPSS 2.0%CVE-2026-5946HIGHInvalid handling of CLASS != INEPSS 1.9%CVE-2018-5739MEDIUMFailure to release memory may exhaust system resourcesEPSS 1.9%CVE-2020-8618MEDIUMA buffer boundary check assertion in rdataset.c can fail incorrectly during zone transferEPSS 1.9%CVE-2026-1519HIGHExcessive NSEC3 iterations cause high CPU load during insecure delegation validationEPSS 1.7%CVE-2026-3593HIGHHeap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementationEPSS 1.5%CVE-2017-3141HIGHWindows service and uninstall paths are not quoted when BIND is installedEPSS 1.4%CVE-2022-2881MEDIUMBuffer overread in statistics channel codeEPSS 1.4%CVE-2023-4408HIGHParsing large DNS messages may cause excessive CPU loadEPSS 1.4%CVE-2026-5947HIGHSIG(0) validation during query flood may lead to undefined behaviorEPSS 1.4%CVE-2026-3608HIGHStack overflow in Kea daemonsEPSS 1.4%CVE-2022-0635HIGHVersions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually tEPSS 1.4%CVE-2022-0667HIGHAssertion failure on delayed DS lookupEPSS 1.4%