What’s Vulnerable › Products
ISC BIND vulnerabilities
224 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 46 published in the last 12 months.
Check whether your ISC BIND version is affected
Exploited ISC BIND vulnerabilities
- CVE-2015-5477 — ISC BIND Data Processing Errors Vulnerability
Latest ISC BIND vulnerabilities
- CVE-2026-97313 — Specific RPZ configurations and query patterns may result in an unexpected exit (CVSS 7.5)
- CVE-2026-96888 — Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization (CVSS 7.5)
- CVE-2026-94300 — Concurrent GSS-TSIG messages corrupt memory (CVSS 8.1)
- CVE-2026-19630 — Amplified resource exhaustion in inbound message processing (CVSS 7.5)
- CVE-2026-80274 — Validating resolver can abort while caching a mismatched NOQNAME proof (CVSS 7.5)
- CVE-2026-77119 — NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets (CVSS 5.9)
- CVE-2026-76163 — named aborts on a TKEY query when the user configuration has no global options statement (CVSS 7.5)
- CVE-2026-75029 — Message parser retains every identical singleton RDATA, enabling wire-to-work amplification (CVSS 5.3)
- CVE-2026-19668 — Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching (CVSS 5.3)
- CVE-2026-19666 — Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (CVSS 7.5)
- CVE-2026-19033 — Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (CVSS 6.5)
- CVE-2026-81736 — Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees (CVSS 7.5)
- CVE-2026-81563 — SVCB AliasMode additional-data error leaks qpcache references (CVSS 7.5)
- CVE-2026-78301 — Out-of-zone database nodes can become authoritative zone cuts (CVSS 5.8)
- CVE-2026-77692 — Unauthenticated remote crash of named via a single DoH SIG(0) request (CVSS 7.5)
- CVE-2026-19941 — checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proof (CVSS 5.9)
- CVE-2026-19667 — Remote assertion failure via 16-bit length truncation in `dns_ncache_add()` (CVSS 7.5)
- CVE-2026-19662 — qpcache NOQNAME proof use-after-free crashes recursive resolver (CVSS 5.9)
- CVE-2026-13321 — DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVSS 8.6)
- CVE-2026-13204 — Unexpected exit in certain situations with NSEC and NSEC3 both present (CVSS 7.5)
- CVE-2026-12617 — Record ordering based unexpected exit with CNAME or DNAME (CVSS 7.5)
- CVE-2026-11721 — Cache poisoning possible with label count discrepancy, RRSIG, and wildcards (CVSS 7.5)
- CVE-2026-11622 — Potential memory usage beyond configured limits (CVSS 7.5)
- CVE-2026-11605 — Unnecessary validation of DNSSEC signed records (CVSS 7.5)
- CVE-2026-11331 — Potential wildcard CNAME RPZ policy bypass (CVSS 7.5)