Supported Platforms

Verifying the Integrity of ISC Downloads using PGP / GPG

ISC CVSS Scoring Guidelines

CVE-2022-3080: BIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedly

CVE-2022-38178: Memory leaks in EdDSA DNSSEC verification code

CVE-2022-38177: Memory leak in ECDSA DNSSEC verification code

CVE-2022-2906: Memory leaks in code handling Diffie-Hellman key exchange via TKEY RRs (OpenSSL 3.0.0+ only)

CVE-2022-2881: Buffer overread in statistics channel code

CVE-2022-2795: Processing large delegations may severely degrade resolver performance

CVE-2021-25219: Lame cache can be abused to severely degrade resolver performance

CVE-2021-25214: A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly

CVE-2021-25215: An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself

CVE-2021-25216: A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack

Hardware Security Modules That Work with BIND 9