Vulnerabilities in ISC

130 results
Vexday analysis

Com 107 CVEs catalogadas e nenhuma em exploração ativa confirmada pelo CISA KEV, o ISC apresenta taxa de exploração abaixo da média geral do catálogo, o que indica um perfil de risco operacional relativamente contido. No entanto, chama atenção o EPSS de 0,9342 associado ao CVE-2020-8617, indicando altíssima probabilidade de exploração para essa vulnerabilidade específica — um sinal de que a ausência de entradas no KEV não elimina exposição relevante. O tipo de falha mais recorrente é CWE-617 (Reachable Assertion), que pode ser explorada para causar negação de serviço em implementações de software como o BIND. Com 3 CVEs com PoC pública e 6 surgidas nos últimos 90 dias, equipes responsáveis por infraestruturas baseadas em tecnologias ISC devem manter ciclos de patching ativos e monitorar especialmente as entradas com alto EPSS.

CVE-2026-12617HIGHRecord ordering based unexpected exit with CNAME or DNAMEEPSS 0.5%CVE-2026-19667HIGHRemote assertion failure via 16-bit length truncation in `dns_ncache_add()`EPSS 0.5%CVE-2026-80274HIGHValidating resolver can abort while caching a mismatched NOQNAME proofEPSS 0.5%CVE-2026-81736HIGHRemote CPU denial of service through cached SVCB/HTTPS AliasMode treesEPSS 0.5%CVE-2026-77692HIGHUnauthenticated remote crash of named via a single DoH SIG(0) requestEPSS 0.5%CVE-2026-76163HIGHnamed aborts on a TKEY query when the user configuration has no global options statementEPSS 0.5%CVE-2026-19666HIGHUse-after-free in query_addnoqnameproof() via the DNS64 filter64 pathEPSS 0.5%CVE-2026-81563HIGHSVCB AliasMode additional-data error leaks qpcache referencesEPSS 0.5%CVE-2025-40780HIGHCache poisoning due to weak PRNGEPSS 0.5%CVE-2025-8696HIGHDoS attack against the Stork UI from an unauthenticated userEPSS 0.4%CVE-2026-11331HIGHPotential wildcard CNAME RPZ policy bypassEPSS 0.4%CVE-2026-19662MEDIUMqpcache NOQNAME proof use-after-free crashes recursive resolverEPSS 0.4%CVE-2026-3592MEDIUMAmplification vulnerabilities via self-pointed glue recordsEPSS 0.4%CVE-2026-75029MEDIUMMessage parser retains every identical singleton RDATA, enabling wire-to-work amplificationEPSS 0.4%CVE-2026-19668MEDIUMResource Exhaustion via Excessive DNSSEC Cryptographic Material MatchingEPSS 0.4%CVE-2025-11232HIGHInvalid characters cause assertEPSS 0.4%CVE-2026-11721HIGHCache poisoning possible with label count discrepancy, RRSIG, and wildcardsEPSS 0.4%CVE-2026-10822MEDIUMKey Record using PRIVATEDNS algorithm may lead to unexpected exitEPSS 0.4%CVE-2026-3591MEDIUMA stack use-after-return flaw in SIG(0) handling code may enable ACL bypassEPSS 0.4%CVE-2024-28872HIGHIncorrect TLS certificate validation can lead to escalated privilegesEPSS 0.3%