ISC BIND 9

Name: ISC BIND 9
Brand: ISC

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical16high11medium1low

updated 2026-10-27

vulnerabilities (69)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-5740US	high7.5	59.6% (99th)	Exploit	no fix	2019-01-16	≤ BIND 9 9.7.0->9.8.8, 9.9.0->9.9.13, 9.10.0->9.10.8, 9.11.0->9.11.4, 9.12.0->9.12.2, 9.13.0->9.13.2
CVE-2017-3143US	medium5.9	18.3% (97th)	Exploit	no fix	2019-01-16	≤ 9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1, 9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S2
CVE-2025-40775US	—	15.3% (97th)	Exploit	no fix	2025-05-21	2 versions
CVE-2019-6467US	high7.5	5.46% (93rd)	Exploit	no fix	2019-10-09	≤ BIND 9.12.0-> 9.12.4, 9.14.0. Also affects all releases in the 9.13 development branch.
CVE-2024-0760US	—	4.68% (92nd)	Exploit	no fix	2024-07-23	3 versions
CVE-2017-3141US	high7.8	1.43% (73rd)	Exploit	no fix	2019-01-16	≤ 9.2.6-P2->9.2.9, 9.3.2-P1->9.3.6, 9.4.0->9.8.8, 9.9.0->9.9.10, 9.10.0->9.10.5, 9.11.0->9.11.1, 9.9.3-S1->9.9.10-S1, 9.10.5-S1
CVE-2025-40778US	—	0.67% (52nd)	Exploit	no fix	2025-10-22	8 versions
CVE-2026-5950US	—	0.66% (51st)	Exploit	no fix	2026-05-20	5 versions
CVE-2022-3736US	high7.5	48.7% (99th)	—	no fix	2023-01-26	4 versions
CVE-2017-3145US	high7.5	27.9% (98th)	—	no fix	2019-01-16	≤ 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1
CVE-2022-3488US	high7.5	19.2% (97th)	—	no fix	2023-01-26	2 versions
CVE-2024-12705US	—	18.4% (97th)	—	no fix	2025-01-29	4 versions
CVE-2017-3135US	medium5.9	17.2% (97th)	—	no fix	2019-01-16	≤ BIND 9 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1
CVE-2022-3924US	high7.5	16.1% (97th)	—	no fix	2023-01-26	4 versions
CVE-2024-11187US	—	15.8% (97th)	—	no fix	2025-01-29	8 versions
CVE-2022-3094US	high7.5	13.2% (96th)	—	no fix	2023-01-26	4 versions
CVE-2017-3140US	medium5.9	12.2% (96th)	—	no fix	2019-01-16	≤ 9.9.10, 9.10.5, 9.11.0->9.11.1, 9.9.10-S1, 9.10.5-S1
CVE-2017-3136US	medium5.9	11.2% (96th)	—	no fix	2019-01-16	≤ 9.8.0 -> 9.8.8-P1, 9.9.0 -> 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.0 -> 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0 -> 9.11.0-P3, 9.11.1b1->9.11.1rc1, 9.9.3-S1 -> 9.9.9-S8
CVE-2018-5738US	high7.5	11.2% (96th)	—	no fix	2019-01-16	≤ 9.9.12, 9.10.7, 9.11.3, 9.12.0->9.12.1-P2, the development release 9.13.0, and also releases 9.9.12-S1, 9.10.7-S1, 9.11.3-S1, and 9.11.3-S2 from BIND 9 Supported Preview Edition.
CVE-2025-8677US	—	10.7% (96th)	—	no fix	2025-10-22	6 versions
CVE-2018-5737US	high7.5	10.4% (96th)	—	no fix	2019-01-16	≤ 9.12.0 and 9.12.1
CVE-2025-13878US	—	9.42% (95th)	—	no fix	2026-01-21	6 versions
CVE-2017-3137US	high7.5	8.97% (95th)	—	no fix	2019-01-16	≤ 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0-P3, 9.11.1b1->9.11.1rc1, and 9.9.9-S8
CVE-2016-9778US	medium5.9	6.84% (94th)	—	no fix	2019-01-16	≤ BIND 9 9.9.8-S1 -> 9.9.8-S3, 9.9.9-S1 -> 9.9.9-S6, 9.11.0-9.11.0-P1
CVE-2018-5743US	high7.5	6.46% (94th)	—	no fix	2019-10-09	≤ BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.6, 9.12.0 -> 9.12.4, 9.14.0. BIND 9 Supported Preview Edition versions 9.9.3-S1 -> 9.11.5-S3, and 9.11.5-S5. Versions 9.13.0 -> 9.13.7 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5743.
CVE-2018-5734US	high7.5	6.29% (94th)	—	no fix	2019-01-16	≤ 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2
CVE-2017-3138US	medium5.3	5.52% (93rd)	—	no fix	2019-01-16	≤ 9.9.9->9.9.9-P7, 9.9.10b1->9.9.10rc2, 9.10.4->9.10.4-P7, 9.10.5b1->9.10.5rc2, 9.11.0->9.11.0-P4, 9.11.1b1->9.11.1rc2, 9.9.9-S1->9.9.9-S9
CVE-2017-3142US	low3.7	5.40% (93rd)	—	no fix	2019-01-16	≤ 9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1, 9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S2
CVE-2019-6465US	medium5.3	3.99% (90th)	—	no fix	2019-10-09	≤ BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P2, 9.12.0 -> 9.12.3-P2, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -> 9.13.6 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2019-6465.
CVE-2023-2828US	—	3.70% (90th)	—	no fix	2023-06-21	5 versions
CVE-2018-5741US	medium6.5OT elevated	3.48% (89th)	—	no fix	2019-01-16	≤ BIND 9 Versions prior to BIND 9.11.5 and BIND 9.12.3
CVE-2018-5744US	high7.5	3.38% (89th)	—	no fix	2019-10-09	≤ BIND 9.10.7 -> 9.10.8-P1, 9.11.3 -> 9.11.5-P1, 9.12.0 -> 9.12.3-P1, and versions 9.10.7-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -> 9.13.6 of the 9.13 development branch are also affected.
CVE-2019-6471US	medium5.9	3.30% (88th)	—	no fix	2019-10-09	≤ BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1.
CVE-2023-3341US	—	2.96% (87th)	—	no fix	2023-09-20	5 versions
CVE-2019-6476US	high7.5	2.91% (87th)	—	no fix	2019-10-17	2 versions
CVE-2023-2911US	—	2.45% (84th)	—	no fix	2023-06-21	4 versions
CVE-2018-5745US	medium4.9OT elevated	2.28% (83rd)	—	no fix	2019-10-09	≤ BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P1, 9.12.0 -> 9.12.3-P1, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -> 9.13.6 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5745.
CVE-2023-4236US	—	2.21% (82nd)	—	no fix	2023-09-20	2 versions
CVE-2024-1975US	—	2.11% (82nd)	—	no fix	2024-07-23	7 versions
CVE-2024-1737US	—	2.11% (82nd)	—	no fix	2024-07-23	7 versions
CVE-2024-4076US	—	2.11% (82nd)	—	no fix	2024-07-23	6 versions
CVE-2026-5946US	—	1.94% (80th)	—	no fix	2026-05-20	7 versions
CVE-2026-1519US	—	1.69% (77th)	—	no fix	2026-03-25	7 versions
CVE-2026-3593US	critical9.8	1.54% (75th)	—	no fix	2026-05-20	3 versions
CVE-2026-5947US	medium5.9	1.39% (72nd)	—	no fix	2026-05-20	3 versions
CVE-2023-4408US	—	1.39% (72nd)	—	no fix	2024-02-13	6 versions
CVE-2019-6475US	high7.5OT elevated	1.34% (71st)	—	no fix	2019-10-17	2 versions
CVE-2023-5679US	—	1.29% (70th)	—	no fix	2024-02-13	5 versions
CVE-2023-5517US	—	1.29% (70th)	—	no fix	2024-02-13	5 versions
CVE-2023-6516US	—	1.11% (66th)	—	no fix	2024-02-13	2 versions

showing 50 of 69

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-617Reachable Assertion22 CVEs
CWE-770Allocation of Resources Without Limits or Throttling10 CVEs
CWE-20Improper Input Validation6 CVEs
CWE-400Uncontrolled Resource Consumption6 CVEs
CWE-416Use After Free4 CVEs
CWE-1284Improper Validation of Specified Quantity in Input2 CVEs
CWE-349Acceptance of Extraneous Untrusted Data With Trusted Data2 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')2 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)69 CVEs
NLNCSC-NL (CSAF)4 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan