Corregido en
Comprueba tu versión
named -vCVE que afectan a 9.17
| CVE | Título | CVSS | Explotada | EPSS | Publicación |
|---|---|---|---|---|---|
| CVE-2021-25216 | A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attac... | 9.8 | — | 2021-04-29 | |
| CVE-2026-13321 | DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field | 8.6 | — | 2026-07-22 | |
| CVE-2020-8616 | BIND does not sufficiently limit the number of fetches performed when processing referrals | 8.6 | — | 2020-05-19 | |
| CVE-2020-8625 | A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack | 8.1 | — | 2021-02-17 | |
| CVE-2020-8623 | A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c | 7.5 | — | 2020-08-21 | |
| CVE-2026-11622 | Potential memory usage beyond configured limits | 7.5 | — | 2026-07-22 | |
| CVE-2021-25218 | A too-strict assertion check could be triggered when responses in BIND 9.16.19 and 9.17.16 require UDP fragmen... | 7.5 | — | 2021-08-18 | |
| CVE-2020-8621 | Attempting QNAME minimization after forwarding can lead to an assertion failure in resolver.c | 7.5 | — | 2020-08-21 | |
| CVE-2020-8620 | In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and... | 7.5 | — | 2020-08-21 | |
| CVE-2026-13204 | Unexpected exit in certain situations with NSEC and NSEC3 both present | 7.5 | — | 2026-07-22 | |
| CVE-2026-11721 | Cache poisoning possible with label count discrepancy, RRSIG, and wildcards | 7.5 | — | 2026-07-22 | |
| CVE-2021-25215 | An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed t... | 7.5 | — | 2021-04-29 | |
| CVE-2026-11331 | Potential wildcard CNAME RPZ policy bypass | 7.5 | — | 2026-07-22 | |
| CVE-2021-25220 | DNS forwarders - cache poisoning vulnerability | 6.8 | — | 2022-03-23 | |
| CVE-2026-10723 | Incorrect acceptance of NSEC3 records | 6.8 | — | 2026-07-22 | |
| CVE-2020-8622 | A truncated TSIG response can lead to an assertion failure | 6.5 | — | 2020-08-21 | |
| CVE-2021-25214 | A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly | 6.5 | — | 2021-04-29 | |
| CVE-2020-8617 | A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c | 5.9 | — | 2020-05-19 | |
| CVE-2021-25219 | Lame cache can be abused to severely degrade resolver performance | 5.3 | — | 2021-10-27 | |
| CVE-2022-0396 | DoS from specifically crafted TCP packets | 5.3 | — | 2022-03-23 | |
| CVE-2020-8624 | update-policy rules of type "subdomain" are enforced incorrectly | 4.3 | — | 2020-08-21 |
Controla estas versiones en tus propios servidores
InfraGuard recopila las versiones de software instaladas en cada servidor y señala las que tienen vulnerabilidades conocidas. Autoalojado: nada sale de tu red.
Datos: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (consulta EPSS en https://www.first.org/epss), endoflife.date. Lista de software: awesome-selfhosted (CC BY-SA 3.0).