ISC BIND
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-25220 | Open Source Branch 9.11 9.11.0 through versions before 9.11.37 ; Development Branch 9.17 BIND 9.17 all version ; Open Source Branch 9.12-16 9.12.0 through versions before 9.16.27 ; … | DNS forwarders - cache poisoning vulnerability | MEDIUM 6.8 | 3.5 % | ||
| CVE-2022-0635 | Open Source Branch 9.18 9.18.0 | Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually t | HIGH 7.5 | 1.3 % | ||
| CVE-2022-0396 | Open Source Branch 9.16 9.16.11 through versions before 9.16.27 ; Development Branch 9.17 BIND 9.17 all versions ; Open Source Branch 9.18 9.18.0 ; … | DoS from specifically crafted TCP packets | MEDIUM 5.3 | 2.7 % | ||
| CVE-2022-0667 | 9.18.0 | Assertion failure on delayed DS lookup | HIGH 7.5 | 1.3 % |