설치된 버전 확인
named -v8.2 에 영향을 주는 CVE
| CVE | 제목 | CVSS | 악용 | EPSS | 공개일 |
|---|---|---|---|---|---|
| CVE-2008-0122 | Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in Fre... | 10.0 | — | 2008-01-16 | |
| CVE-1999-0837 | Denial of service in BIND by improperly closing TCP sessions via so_linger. | 10.0 | — | 1999-11-10 | |
| CVE-2001-0010 | Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root p... | 10.0 | — | 2001-02-12 | |
| CVE-2015-5722 | buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause... | 7.8 | — | 2015-09-05 | |
| CVE-2001-0497 | dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for... | 7.8 | — | 2001-07-21 | |
| CVE-2009-0265 | Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value from the Ope... | 7.5 | — | 2009-01-26 | |
| CVE-2002-1219 | Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remot... | 7.5 | — | 2002-11-29 | |
| CVE-1999-0833 | Buffer overflow in BIND 8.2 via NXT records. | 7.5 | — | 1999-11-10 | |
| CVE-2006-4095 | BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) vi... | 7.5 | — | 2006-09-06 | |
| CVE-2000-0335 | The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results. | 7.5 | — | 2000-05-03 | |
| CVE-2016-2776 | buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not... | 7.5 | — | 2016-09-28 | |
| CVE-2015-5986 | openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers... | 7.1 | — | 2015-09-05 | |
| CVE-2018-5741 | Update policies krb5-subdomain and ms-subdomain do not enforce controls promised in their documentation | 6.5 | — | 2019-01-16 | |
| CVE-1999-0849 | Denial of service in BIND named via maxdname. | 5.0 | — | 1999-11-10 | |
| CVE-2002-1221 | BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with i... | 5.0 | — | 2002-11-29 | |
| CVE-2001-0012 | BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables. | 5.0 | — | 2001-02-12 | |
| CVE-2000-0887 | named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed... | 5.0 | — | 2000-12-19 | |
| CVE-2002-2211 | BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduc... | 5.0 | — | 2002-12-31 | |
| CVE-2002-2212 | The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary... | 5.0 | — | 2002-12-31 | |
| CVE-2002-2213 | The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitra... | 5.0 | — | 2002-12-31 | |
| CVE-1999-0848 | Denial of service in BIND named via consuming more than "fdmax" file descriptors. | 5.0 | — | 1999-11-10 | |
| CVE-2000-0888 | named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV reco... | 5.0 | — | 2000-12-19 | |
| CVE-2010-3762 | ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures i... | 4.3 | — | 2010-10-05 | |
| CVE-2003-0914 | ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicio... | 4.3 | — | 2003-12-15 | |
| CVE-2007-2930 | The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predict... | 4.3 | — | 2007-09-12 |
내 서버의 버전을 직접 추적하세요
InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.
데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).