Vulnerabilities in ISC

134 results
CVE-2026-80274HIGHValidating resolver can abort while caching a mismatched NOQNAME proofEPSS 0.6%CVE-2026-19667HIGHRemote assertion failure via 16-bit length truncation in `dns_ncache_add()`EPSS 0.6%CVE-2026-81563HIGHSVCB AliasMode additional-data error leaks qpcache referencesEPSS 0.6%CVE-2026-19666HIGHUse-after-free in query_addnoqnameproof() via the DNS64 filter64 pathEPSS 0.6%CVE-2026-81736HIGHRemote CPU denial of service through cached SVCB/HTTPS AliasMode treesEPSS 0.6%CVE-2026-11622HIGHPotential memory usage beyond configured limitsEPSS 0.5%CVE-2025-40779HIGHKea crash upon interaction between specific client options and subnet selectionEPSS 0.5%CVE-2026-12617HIGHRecord ordering based unexpected exit with CNAME or DNAMEEPSS 0.5%CVE-2026-13204HIGHUnexpected exit in certain situations with NSEC and NSEC3 both presentEPSS 0.5%CVE-2026-19668MEDIUMResource Exhaustion via Excessive DNSSEC Cryptographic Material MatchingEPSS 0.5%CVE-2026-75029MEDIUMMessage parser retains every identical singleton RDATA, enabling wire-to-work amplificationEPSS 0.5%CVE-2025-40780HIGHCache poisoning due to weak PRNGEPSS 0.5%CVE-2026-19662MEDIUMqpcache NOQNAME proof use-after-free crashes recursive resolverEPSS 0.5%CVE-2025-8696HIGHDoS attack against the Stork UI from an unauthenticated userEPSS 0.5%CVE-2026-96888HIGHNamed may terminate unexpectedly when a redirect zone is used with strict QNAME minimizationEPSS 0.5%CVE-2026-19630HIGHAmplified resource exhaustion in inbound message processingEPSS 0.4%CVE-2026-97313HIGHSpecific RPZ configurations and query patterns may result in an unexpected exitEPSS 0.4%CVE-2026-11331HIGHPotential wildcard CNAME RPZ policy bypassEPSS 0.4%CVE-2025-11232HIGHInvalid characters cause assertEPSS 0.4%CVE-2026-10822MEDIUMKey Record using PRIVATEDNS algorithm may lead to unexpected exitEPSS 0.4%