InfraGuard

BIND 9 4.9 취약점

BIND 9 4.9 라인에 영향을 주는 알려진 CVE 는 25건입니다.

10.0 최고 CVSS
설치된 버전 확인named -v

4.9 에 영향을 주는 CVE

CVE 제목 CVSS 악용 EPSS 공개일
CVE-2001-0013 Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privil... 10.0 — 2001-02-12
CVE-2008-0122 Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in Fre... 10.0 — 2008-01-16
CVE-2001-0011 Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges. 10.0 — 2001-02-12
CVE-1999-0009 Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases. 10.0 — 1998-04-08
CVE-2015-5722 buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause... 7.8 — 2015-09-05
CVE-2001-0497 dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for... 7.8 — 2001-07-21
CVE-2009-0265 Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value from the Ope... 7.5 — 2009-01-26
CVE-2002-1219 Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remot... 7.5 — 2002-11-29
CVE-2002-0029 Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived librarie... 7.5 — 2002-11-29
CVE-2006-4095 BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) vi... 7.5 — 2006-09-06
CVE-2016-2776 buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not... 7.5 — 2016-09-28
CVE-2002-0684 Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND... 7.5 — 2002-08-12
CVE-2015-5986 openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers... 7.1 — 2015-09-05
CVE-2018-5741 Update policies krb5-subdomain and ms-subdomain do not enforce controls promised in their documentation 6.5 — 2019-01-16
CVE-1999-0011 Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer. 5.4 — 1998-04-08
CVE-1999-0849 Denial of service in BIND named via maxdname. 5.0 — 1999-11-10
CVE-1999-0024 DNS cache poisoning via BIND, by predictable query IDs. 5.0 — 1997-08-13
CVE-1999-0010 Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages. 5.0 — 1998-04-08
CVE-2001-0012 BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables. 5.0 — 2001-02-12
CVE-2002-2211 BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduc... 5.0 — 2002-12-31
CVE-2002-2212 The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary... 5.0 — 2002-12-31
CVE-2002-2213 The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitra... 5.0 — 2002-12-31
CVE-2010-3762 ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures i... 4.3 — 2010-10-05
CVE-2007-2930 The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predict... 4.3 — 2007-09-12
CVE-1999-1499 named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db wh... 2.1 — 1998-04-10

내 서버의 버전을 직접 추적하세요

InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.

주간 악용 취약점 다이제스트

셀프호스팅 서버에 중요한 KEV 추가분을 일주일에 한 번 보내드립니다. 다른 메일은 보내지 않습니다.

데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).