p PatchFirst

PatchFirst · Latest vulnerabilities

bind9 vulnerabilities · Page 3

Vulnerabilities published for bind9 in the last 30 days: 3. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 42

  1. CVE-2016-2775

    Medium · CVSS 5.9EPSS 63.35%Fix available

    CVE-2016-2775

    ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.

    bind9Operating systems
    • Update to 1:9.9.5.dfsg-3ubuntu0.19+esm9
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2016-6170

    Medium · CVSS 6.5EPSS 40.94%No fix published

    CVE-2016-6170

    ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (secondary DNS server crash) via a large AXFR response, and possibly allows IXFR servers to cause a denial of service (IXFR client crash) via a large IXFR response and allows remote authenticated users to cause a denial of service (primary DNS server crash) via a large UPDATE message.

    bind9Operating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →