Approved changes feed: RSS · Atom

cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:*

part: a version: 9.0 update: *

VendorIsc (4a2f2b37-98b6-5702-822d-72afcd17d050)
ProductBind (ea404969-e27c-5a4f-ab6f-da9eff8fdf08)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/isc-projects/bind9 purl2cpe 2026-06-01 10:15:10.769616
pkg:gitlab/isc-projects/bind9 purl2cpe 2026-06-01 10:15:10.769617

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-1975 vulnerable 2026-06-08 06:27:15.162055 SIG(0) can be used to exhaust CPU resources
HIGH (7.5)
If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by sending a stream of SIG(0) signed requests. This issue affects BIND 9 versions 9.0.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.49-S1, and 9.18.11-S1 through 9.18.27-S1.
Published: 2024-07-23T14:38:57.143Z
Updated: 2025-02-13T17:32:28.908Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9444 vulnerable 2026-06-08 05:08:23.606565 Details available
named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DS resource record in an answer.
Published: 2017-01-12T06:06:00.000Z
Updated: 2024-08-06T02:50:38.365Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8705 vulnerable 2026-06-08 05:07:04.742927 Details available
buffer.c in named in ISC BIND 9.10.x before 9.10.3-P3, when debug logging is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit, or daemon crash) or possibly have unspecified other impact via (1) OPT data or (2) an ECS option.
Published: 2016-01-20T15:00:00.000Z
Updated: 2024-08-06T08:29:21.425Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8704 vulnerable 2026-06-08 05:07:04.732406 Details available
apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record.
Published: 2016-01-20T15:00:00.000Z
Updated: 2024-08-06T08:29:20.879Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8461 vulnerable 2026-06-08 05:07:04.042558 Details available
Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via unspecified vectors.
Published: 2015-12-16T15:00:00.000Z
Updated: 2024-08-06T08:20:41.759Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8000 vulnerable 2026-06-08 05:07:02.753227 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8500 vulnerable 2026-06-08 05:06:08.974264 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5166 vulnerable 2026-06-08 05:02:54.893903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4244 vulnerable 2026-06-08 05:02:16.631667 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1667 vulnerable 2026-06-08 05:00:50.260631 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1033 vulnerable 2026-06-08 05:00:47.122745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4313 vulnerable 2026-06-08 04:59:30.161133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1910 vulnerable 2026-06-08 04:58:02.604234 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3614 vulnerable 2026-06-08 04:55:15.806338 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0382 vulnerable 2026-06-08 04:52:02.001742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0290 vulnerable 2026-06-08 04:52:01.486907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0097 vulnerable 2026-06-08 04:51:52.631682 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4022 vulnerable 2026-06-08 04:51:46.344285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0025 vulnerable 2026-06-08 04:51:06.964211 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2926 vulnerable 2026-06-08 04:49:46.505239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0494 vulnerable 2026-06-08 04:49:32.585996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2073 vulnerable 2026-06-08 04:48:58.787060 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0400 vulnerable 2026-06-08 04:46:21.357865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.