Isc Bind9 vulnerabilities, page 2
23 vulnerabilities
Known vulnerabilities in Isc Bind9, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-38177alpinebind+9
EPSS score3.17%
By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.CVE-2022-3080alpinebind+7EPSS score1.95%
By sending specific queries to the resolver, an attacker can cause named to crash.CVE-2019-6477alpinebind+34EPSS score4.06%
With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query received via UDP or via TCP without pipelining enabled. A client using a TCP-pipelined connection to a server could consume more resources than the server has been provisioned to handle. When a TCP connection with a large number of pipelined queries is closed, the load on the server releasing these multiple resources can cause it to become unresponsive, even for queries that can be answered authoritatively or from cache. (This is most likely to be perceived as an intermittent server problem).