Approved changes feed: RSS · Atom

cpe:2.3:a:isc:bind:9.9.4:*:*:*:*:*:*:*

part: a version: 9.9.4 update: *

VendorIsc (4a2f2b37-98b6-5702-822d-72afcd17d050)
ProductBind (ea404969-e27c-5a4f-ab6f-da9eff8fdf08)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-8500 vulnerable 2026-06-03 14:34:24.168670 Details available
ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals.
Published: 2014-12-11T02:00:00.000Z
Updated: 2024-08-06T13:18:48.302Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0591 vulnerable 2026-06-03 14:33:39.032493 Details available
The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature.
Published: 2014-01-14T02:00:00.000Z
Updated: 2024-08-06T09:20:19.832Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.