isc Vulnerability Advisory Catalog

Total 208 security vulnerabilities recorded for isc software and firmware.

← Back to All Vendors
CVE-2015-8373 MEDIUM
Component: kea

The kea-dhcp4 and kea-dhcp6 servers 0.9.2 and 1.0.0-beta in ISC Kea, when certain debugging settings are used, allow remote attackers to cause a denia...

📅 2015-12-22
CVSS 6.8 Dossier →
CVE-2015-8461 UNKNOWN
Component: bind

Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of servi...

📅 2015-12-16
CVSS 7.1 Dossier →
CVE-2015-5986 UNKNOWN
Component: bind

openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (REQUIRE a...

📅 2015-09-05
CVSS 7.1 Dossier →
CVE-2015-5722 UNKNOWN
Component: bind

buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure ...

📅 2015-09-05
CVSS 7.8 Dossier →
Component: bind

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and ...

📅 2015-07-29
CVSS 7.5 Dossier →
CVE-2015-4620 UNKNOWN
Component: bind

name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNSSEC valid...

📅 2015-07-08
CVSS 7.8 Dossier →
CVE-2015-1349 UNKNOWN
Component: bind

named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, al...

📅 2015-02-19
CVSS 5.4 Dossier →
CVE-2014-8680 UNKNOWN
Component: bind

The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service (assertion failure and named exit) via ...

📅 2014-12-11
CVSS 5.4 Dossier →
CVE-2014-8500 UNKNOWN
Component: bind

ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to caus...

📅 2014-12-11
CVSS 7.8 Dossier →
CVE-2014-3859 UNKNOWN
Component: bind

libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a denial of service (REQUIRE asserti...

📅 2014-06-13
CVSS 5.0 Dossier →
CVE-2014-3214 UNKNOWN
Component: bind

The prefetch implementation in named in ISC BIND 9.10.0, when a recursive nameserver is enabled, allows remote attackers to cause a denial of service ...

📅 2014-05-09
CVSS 5.0 Dossier →
CVE-2014-0591 UNKNOWN
Component: bind

The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-...

📅 2014-01-14
CVSS 2.6 Dossier →
CVE-2013-6230 UNKNOWN
Component: bind

The Winsock WSAIoctl API in Microsoft Windows Server 2008, as used in ISC BIND 9.6-ESV before 9.6-ESV-R10-P1, 9.8 before 9.8.6-P1, 9.9 before 9.9.4-P1...

📅 2013-11-08
CVSS 6.8 Dossier →
CVE-2013-4854 UNKNOWN
Component: bind

The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-...

📅 2013-07-29
CVSS 7.8 Dossier →
CVE-2013-3919 UNKNOWN
Component: bind

resolver.c in ISC BIND 9.8.5 before 9.8.5-P1, 9.9.3 before 9.9.3-P1, and 9.6-ESV-R9 before 9.6-ESV-R9-P1, when a recursive resolver is configured, all...

📅 2013-06-06
CVSS 7.8 Dossier →
CVE-2013-2494 UNKNOWN
Component: dhcp

libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a denial of service (memory consumption) via vectors involving a regular ...

📅 2013-03-28
CVSS 4.9 Dossier →
CVE-2013-2266 UNKNOWN
Component: bind

libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows rem...

📅 2013-03-28
CVSS 7.8 Dossier →
CVE-2012-5689 UNKNOWN
Component: bind

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA r...

📅 2013-01-25
CVSS 7.1 Dossier →
CVE-2012-5688 UNKNOWN
Component: bind

ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (assertion failu...

📅 2012-12-06
CVSS 7.8 Dossier →
CVE-2012-3523 UNKNOWN
Component: inn

The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert ...

📅 2012-11-11
CVSS 6.8 Dossier →
CVE-2012-5166 UNKNOWN
Component: bind

ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to ca...

📅 2012-10-10
CVSS 7.8 Dossier →
CVE-2012-4244 UNKNOWN
Component: bind

ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to ca...

📅 2012-09-14
CVSS 7.8 Dossier →
CVE-2012-3955 UNKNOWN
Component: dhcp

ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunistic circum...

📅 2012-09-14
CVSS 7.1 Dossier →
CVE-2012-3954 UNKNOWN
Component: dhcp

Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of service (m...

📅 2012-07-25
CVSS 3.3 Dossier →
Page 5 of 9 (208 Total Records)