BIND 9 Security Vulnerability Matrix

CVE-2020-8616: BIND does not sufficiently limit the number of fetches performed when processing referrals

CVE-2020-8619: An asterisk character in an empty non-terminal can cause an assertion failure in rbtdb.c

CVE-2020-8618: A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer

What is an Empty Non-Terminal?

An Overview of BIND 9 Documentation

CVE-2020-8617: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c

Operational Notification: An error in handling TCP client quota limits can exhaust TCP connections in BIND 9.16.0

CVE-2011-1907: RRSIG Queries Can Trigger Server Crash When Using Response Policy Zones

CVE-2012-5689 [JP]: DNS64を有効にしたBIND 9がRPZの名前解決時に予期せず停止する

CVE-2012-5688 [JP]: DNS64を利用するBIND 9サーバが細工されたクエリによってクラッシュする

CVE-2012-5166 [JP]: 特別に細工されたDNSのデータによるnamedのハングアップ

CVE-2011-4313: BIND 9 Resolver crashes after logging an error in query.c

Operational Notification: synth-from-dnssec may cause slow resolution on resolvers under certain cache conditions

CVE-2019-6467: An error in the nxdomain redirect feature can cause BIND to exit with an INSIST assertion failure in query.c

CVE-2019-6468: BIND Supported Preview Edition can exit with an assertion failure if nxdomain-redirect is used

CVE-2019-6471: A race condition when discarding malformed packets can cause BIND to exit with an assertion failure

CVE-2019-6476: An error in QNAME minimization code can cause BIND to exit with an assertion failure

CVE-2019-6475: A flaw in mirror zone validity checking can allow zone data to be spoofed

In-line Signing With NSEC3 in BIND 9.9+ -- A Walk-through