BIND 9 Security Vulnerability Matrix

CVE-2019-6471: A race condition when discarding malformed packets can cause BIND to exit with an assertion failure

Operational Notification: Segmentation Fault in resolver.c Affects BIND 9.6-ESV-R6, 9.7.5, 9.8.2, & 9.9.0

CVE-2019-6469: BIND Supported Preview Edition can exit with an assertion failure if ECS is in use

Gathering Information on BIND 9 Memory Usage

CVE-2019-6468: BIND Supported Preview Edition can exit with an assertion failure if nxdomain-redirect is used

CVE-2019-6467: An error in the nxdomain redirect feature can cause BIND to exit with an INSIST assertion failure in query.c

CVE-2018-5743: Limiting simultaneous TCP clients is ineffective

CVE-2018-5745: An assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys

CVE-2018-5744: A specially crafted packet can cause named to leak memory

CVE-2019-6465: Zone transfer controls for writable DLZ zones were not effective

An Overview of BIND 9 Documentation

Adding class support for DHCPv6 in ISC DHCP 4.3

BIND 9.10 Administrator Reference Manual (ARM)

A Basic Guide to Configuring DHCP Failover

CVE-2017-3136: An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"

CVE-2016-8864: A problem handling responses containing a DNAME answer can lead to an assertion failure

CVE-2012-5688: BIND 9 servers using DNS64 can be crashed by a crafted query

CVE-2012-3817: Heavy DNSSEC Validation Load Can Cause a "Bad Cache" Assertion Failure in BIND 9

CVE-2018-5741: Update policies krb5-subdomain and ms-subdomain