InfraGuard

Vulnerabilidades de BIND 9 8.3

16 CVE conocidos afectan a la rama 8.3 de BIND 9.

10.0 CVSS máx.
Comprueba tu versiónnamed -v

CVE que afectan a 8.3

CVE Título CVSS Explotada EPSS Publicación
CVE-2008-0122 Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in Fre... 10.0 — 2008-01-16
CVE-2015-5722 buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause... 7.8 — 2015-09-05
CVE-2009-0265 Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value from the Ope... 7.5 — 2009-01-26
CVE-2002-1219 Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remot... 7.5 — 2002-11-29
CVE-2006-4095 BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) vi... 7.5 — 2006-09-06
CVE-2016-2776 buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not... 7.5 — 2016-09-28
CVE-2015-5986 openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers... 7.1 — 2015-09-05
CVE-2018-5741 Update policies krb5-subdomain and ms-subdomain do not enforce controls promised in their documentation 6.5 — 2019-01-16
CVE-2002-1221 BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with i... 5.0 — 2002-11-29
CVE-2002-2211 BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduc... 5.0 — 2002-12-31
CVE-2002-2212 The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary... 5.0 — 2002-12-31
CVE-2002-2213 The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitra... 5.0 — 2002-12-31
CVE-2002-1220 BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion fa... 5.0 — 2002-11-29
CVE-2010-3762 ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures i... 4.3 — 2010-10-05
CVE-2003-0914 ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicio... 4.3 — 2003-12-15
CVE-2007-2930 The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predict... 4.3 — 2007-09-12

Controla estas versiones en tus propios servidores

InfraGuard recopila las versiones de software instaladas en cada servidor y señala las que tienen vulnerabilidades conocidas. Autoalojado: nada sale de tu red.

Resumen semanal de vulnerabilidades explotadas

Las incorporaciones a KEV relevantes para servidores autoalojados, una vez por semana. Ningún otro correo.

Datos: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (consulta EPSS en https://www.first.org/epss), endoflife.date. Lista de software: awesome-selfhosted (CC BY-SA 3.0).