BIND 9 Software Vulnerability Matrix - 9.18

The BIND 9 Software Vulnerability Matrix details known security vulnerabilities in version 9.18 of BIND during that branch's support life. Vulnerabilities are identified by their CVE ID: Common Vulnerabilities and Exposures.

For current versions of BIND, see the main BIND 9 Software Vulnerability Matrix.

Using this matrix

Each row with a CVE ID gives the version(s) that fix that problem.

Determining vulnerability

To determine if/how a given version is vulnerable:

• Find the column heading for the corresponding branch (9.X version)
• Read down that column to find the specific 9.X.Y version (or use "Find" in your browser)

To determine if a given CVE applies:

• Read down the "CVE ID" column to find the CVE ID (or use "Find" in your browser)
• If you do not know the CVE ID, consult the complete list of all BIND advisories

Once you find a given table row (CVE ID and/or version):

• The listed version(s) contain fixes for that CVE, and are not vulnerable to that CVE
• A dash (-) indicates no version of that branch (column) is vulnerable to that CVE (row)
• That version is vulnerable to later CVEs (above the row)
• That version is not vulnerable to earlier CVEs (below the row)

For table rows without a CVE:

• A dash (-) indicates that row does not apply to that branch (column)

Supported Preview Edition

• Most CVEs apply equally to both the open source edition and the Supported Preview Edition (-S).
• If a row lists the -S1 suffix, the CVE applies only to the Supported Preview Edition.
• If no -S1 suffix is present, the CVE applies to both editions.

The matrix

Each row with a CVE ID gives the version(s) that fix that problem.