Known Vulnerabilities for products from ISC
Listed below are 20 of the newest known vulnerabilities associated with the vendor "ISC".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-13321 json | The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone. Th... | Not Provided | 2026-07-22 | 2026-11-02 |
| CVE-2026-13204 json | If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only on... | Not Provided | 2026-07-22 | 2026-11-02 |
| CVE-2026-12617 json | The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DN... | Not Provided | 2026-07-22 | 2026-11-02 |
| CVE-2026-11721 json | It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone i... | Not Provided | 2026-07-22 | 2026-11-02 |
| CVE-2026-11622 json | A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway mem... | Not Provided | 2026-07-22 | 2026-11-02 |
| CVE-2026-11605 json | The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records i... | Not Provided | 2026-07-22 | 2026-11-02 |
| CVE-2026-11331 json | An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to... | Not Provided | 2026-07-22 | 2026-11-02 |
| CVE-2026-10822 json | If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently... | Not Provided | 2026-07-22 | 2026-11-02 |
| CVE-2026-10723 json | BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN re... | Not Provided | 2026-07-22 | 2026-11-02 |
| CVE-2026-5950 json | An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a rem... | Not Provided | 2026-05-20 | 2026-07-23 |
| CVE-2026-5947 json | Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DN... | Not Provided | 2026-05-20 | 2026-08-24 |
| CVE-2026-5946 json | Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) —... | Not Provided | 2026-05-20 | 2026-09-17 |
| CVE-2026-3593 json | A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue affects BIND 9 versions 9.20.0 thr... | Not Provided | 2026-05-20 | 2026-08-24 |
| CVE-2026-3592 json | BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to ... | Not Provided | 2026-05-20 | 2026-07-24 |
| CVE-2026-3591 json | A use-after-return vulnerability exists in the `named` server when handling DNS queries signed with SIG(0). Using a specially... | Not Provided | 2026-03-25 | 2026-05-21 |
| CVE-2026-3119 json | Under certain conditions, `named` may crash when processing a correctly signed query containing a TKEY record. The affected c... | Not Provided | 2026-03-25 | 2026-05-21 |
| CVE-2026-3104 json | A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain. This issue a... | Not Provided | 2026-03-25 | 2026-09-01 |
| CVE-2026-3039 json | BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consu... | Not Provided | 2026-05-20 | 2026-09-17 |
| CVE-2026-1519 json | If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excess... | Not Provided | 2026-03-25 | 2026-09-10 |
| CVE-2023-4236 json | A flaw in the networking code handling DNS-over-TLS queries may cause `named` to terminate unexpectedly due to an assertion f... | 7.5 - HIGH | 2023-09-20 | 2024-02-01 |
Known software with vulnerabilities from ISC
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Isc | Bind | - |
| Application | Isc | Dhcp | 3.0 |
| Application | Isc | Dhcpd | - |
| Application | Isc | Dhcp Client | - |
| Application | Isc | Dnsco Bind | 9.9.3 |
| Application | Isc | Inn | - |
| Application | Isc | Kea | 0.9.2 |