Approved changes feed: RSS · Atom

cpe:2.3:a:isc:bind:9.5.2:p4:*:*:*:*:*:*

part: a version: 9.5.2 update: p4

VendorIsc (4a2f2b37-98b6-5702-822d-72afcd17d050)
ProductBind (ea404969-e27c-5a4f-ab6f-da9eff8fdf08)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/isc-projects/bind9 purl2cpe 2026-06-01 10:15:11.034237
pkg:gitlab/isc-projects/bind9 purl2cpe 2026-06-01 10:15:11.034238

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-9444 vulnerable 2026-06-03 14:36:16.660222 Details available
named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DS resource record in an answer.
Published: 2017-01-12T06:06:00.000Z
Updated: 2024-08-06T02:50:38.365Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2848 vulnerable 2026-06-03 14:35:44.147986 Details available
ISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via malformed options data in an OPT resource record.
Published: 2016-10-21T10:00:00.000Z
Updated: 2024-08-05T23:32:21.181Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5166 vulnerable 2026-06-03 14:32:27.868359 Details available
ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service (named daemon hang) via unspecified combinations of resource records.
Published: 2012-10-10T21:00:00.000Z
Updated: 2024-08-06T20:58:03.101Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4244 vulnerable 2026-06-03 14:32:18.101907 Details available
ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a long resource record.
Published: 2012-09-14T00:00:00.000Z
Updated: 2024-08-06T20:28:07.596Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1667 vulnerable 2026-06-03 14:31:44.034340 Details available
ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
Published: 2012-06-05T16:00:00.000Z
Updated: 2024-08-06T19:01:02.980Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4313 vulnerable 2026-06-03 14:31:23.878212 Details available
query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.
Published: 2011-11-29T17:00:00.000Z
Updated: 2024-08-07T00:01:51.597Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1910 vulnerable 2026-06-03 14:31:04.494976 Details available
Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets.
Published: 2011-05-31T20:00:00.000Z
Updated: 2024-08-06T22:46:00.521Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3614 vulnerable 2026-06-03 14:30:32.355279 Details available
named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, which might allow remote attackers to cause a denial of service (DNSSEC validation error) by triggering a rollover.
Published: 2010-12-03T20:00:00.000Z
Updated: 2024-08-07T03:18:52.898Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.