Approved changes feed: RSS · Atom

cpe:2.3:a:isc:bind:9.9.8:p2:*:*:*:*:*:*

part: a version: 9.9.8 update: p2

VendorIsc (4a2f2b37-98b6-5702-822d-72afcd17d050)
ProductBind (ea404969-e27c-5a4f-ab6f-da9eff8fdf08)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/isc-projects/bind9 purl2cpe 2026-06-01 10:15:11.177853
pkg:gitlab/isc-projects/bind9 purl2cpe 2026-06-01 10:15:11.177854

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-9444 vulnerable 2026-06-03 14:36:16.706508 Details available
named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DS resource record in an answer.
Published: 2017-01-12T06:06:00.000Z
Updated: 2024-08-06T02:50:38.365Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1286 vulnerable 2026-06-03 14:35:31.647729 Details available
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record, related to db.c and resolver.c.
Published: 2016-03-09T23:00:00.000Z
Updated: 2024-08-05T22:48:13.712Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1285 vulnerable 2026-06-03 14:35:31.536064 Details available
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.
Published: 2016-03-09T23:00:00.000Z
Updated: 2024-08-05T22:48:13.763Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8705 vulnerable 2026-06-03 14:35:12.739041 Details available
buffer.c in named in ISC BIND 9.10.x before 9.10.3-P3, when debug logging is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit, or daemon crash) or possibly have unspecified other impact via (1) OPT data or (2) an ECS option.
Published: 2016-01-20T15:00:00.000Z
Updated: 2024-08-06T08:29:21.425Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8704 vulnerable 2026-06-03 14:35:12.734292 Details available
apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.
Published: 2016-01-20T15:00:00.000Z
Updated: 2024-08-06T08:29:20.879Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.