ISC BIND 4.9.4

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:isc:bind:4.9.4:*:*:*:*:*:*:*

part: a version: 4.9.4 update: *

VendorIsc (4a2f2b37-98b6-5702-822d-72afcd17d050)
ProductBind (ea404969-e27c-5a4f-ab6f-da9eff8fdf08)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/isc-projects/bind9 purl2cpe 2026-06-01 10:15:10.769375
pkg:gitlab/isc-projects/bind9 purl2cpe 2026-06-01 10:15:10.769377

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-2213 vulnerable 2026-06-03 14:26:23.482418 Details available
The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.
Published: 2006-05-23T16:00:00.000Z
Updated: 2024-09-16T21:08:51.276Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2212 vulnerable 2026-06-03 14:26:23.471978 Details available
The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.
Published: 2006-05-23T16:00:00.000Z
Updated: 2024-09-16T23:42:25.949Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2211 vulnerable 2026-06-03 14:26:23.458131 Details available
BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.
Published: 2006-05-23T16:00:00.000Z
Updated: 2024-08-08T03:51:17.718Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0029 vulnerable 2026-06-03 14:26:13.087900 Details available
Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote attackers to execute arbitrary code via DNS server responses that trigger the overflow in the (1) getnetbyname, or (2) getnetbyaddr functions, aka "LIBRESOLV: buffer overrun" and a different vulnerability than CVE-2002-0684.
Published: 2002-11-21T05:00:00.000Z
Updated: 2024-08-08T02:35:17.387Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.