GCVE - cpe:2.3:a:isc:bind:9.9.8:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:isc:bind:9.9.8:*:*:*:*:*:*:*

part: a version: 9.9.8 update: *

Vendor	Isc (`4a2f2b37-98b6-5702-822d-72afcd17d050`)
Product	Bind (`ea404969-e27c-5a4f-ab6f-da9eff8fdf08`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/isc-projects/bind9`	purl2cpe	2026-06-01 10:15:11.177845
`pkg:gitlab/isc-projects/bind9`	purl2cpe	2026-06-01 10:15:11.177846

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-3135`	vulnerable	2026-06-03 14:37:09.583502	Combination of DNS64 and RPZ Can Lead to Crash HIGH (7.5) Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1. Published: 2019-01-16T20:00:00.000Z Updated: 2024-09-16T17:53:49.488Z Open on db.gcve.eu Reference links https://security.gentoo.org/glsa/201708-01 http://rhn.redhat.com/errata/RHSA-2017-0276.html https://security.netapp.com/advisory/ntap-20180926-0005/ https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03747en_us http://www.securityfocus.com/bid/96150	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8461`	vulnerable	2026-06-03 14:35:12.004315	Details available Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via unspecified vectors. Published: 2015-12-16T15:00:00.000Z Updated: 2024-08-06T08:20:41.759Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1034419 http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174145.html http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174252.html https://kb.isc.org/article/AA-01438 http://www.securityfocus.com/bid/79347	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8000`	vulnerable	2026-06-03 14:35:10.827052	Details available db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a malformed class attribute. Published: 2015-12-16T15:00:00.000Z Updated: 2024-08-06T08:06:31.443Z Open on db.gcve.eu Reference links http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://marc.info/?l=bugtraq&m=145680832702035&w=2 https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/ https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/ http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174145.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.