ISC BIND9

Name: ISC BIND9
Brand: ISC

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical14high8medium0low

updated 2026-10-28

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-8617US	medium5.9	93.4% (100th)	Exploit	no fix	2020-05-19	≤ 9.0.0 -> 9.11.18, 9.12.0 -> 9.12.4-P2, 9.14.0 -> 9.14.11, 9.16.0 -> 9.16.2, and releases 9.17.0 -> 9.17.1 of the 9.17 experimental development branch. All releases in the obsolete 9.13 and 9.15 development branches. All releases of BIND Supported Preview Edition from 9.9.3-S1 -> 9.11.18-S1
CVE-2021-25216US	critical9.8	83.0% (100th)	—	no fix	2021-04-29	5 versions
CVE-2020-8625US	high8.1	64.2% (99th)	—	no fix	2021-02-17	5 versions
CVE-2021-25215US	high7.5	11.8% (96th)	—	no fix	2021-04-29	5 versions
CVE-2020-8616US	high8.6	11.0% (96th)	—	no fix	2020-05-19	≤ 9.0.0 -> 9.11.18, 9.12.0 -> 9.12.4-P2, 9.14.0 -> 9.14.11, 9.16.0 -> 9.16.2, and releases 9.17.0 -> 9.17.1 of the 9.17 experimental development branch. All releases in the obsolete 9.13 and 9.15 development branches. All releases of BIND Supported Preview Edition from 9.9.3-S1 -> 9.11.18-S1
CVE-2021-25219US	medium5.3	11.0% (96th)	—	no fix	2021-10-27	5 versions
CVE-2020-8623US	high7.5	6.63% (94th)	—	9.17.4	2020-08-21	7 versions
CVE-2021-25214US	medium6.5	6.28% (94th)	—	no fix	2021-04-29	6 versions
CVE-2022-1183US	high7.5	6.27% (94th)	—	no fix	2022-05-19	2 versions
CVE-2020-8622US	medium6.5	5.79% (93rd)	—	9.17.4	2020-08-21	7 versions
CVE-2019-6477US	high7.5	4.06% (91st)	—	no fix	2019-11-26	≤ 9.11.6-P1 -> 9.11.12, 9.12.4-P1 -> 9.12.4-P2, 9.14.1 -> 9.14.7, and versions 9.11.5-S6 -> 9.11.12-S1 of BIND 9 Supported Preview Edition. Versions 9.15.0 -> 9.15.5 of the BIND 9.15 development branch are also affected
CVE-2020-8620US	high7.5	3.83% (90th)	—	*	2020-08-21	9.15.6 → *
CVE-2020-8624US	medium4.3	3.75% (90th)	—	unspecified	2020-08-21	14 versions
CVE-2021-25218US	high7.5	3.59% (89th)	—	no fix	2021-08-18	3 versions
CVE-2022-38177US	high7.5	3.29% (88th)	—	no fix	2022-09-21	3 versions
CVE-2022-38178US	high7.5	3.11% (88th)	—	no fix	2022-09-21	7 versions
CVE-2020-8621US	high7.5	2.97% (87th)	—	*	2020-08-21	9.14.0 → *
CVE-2022-2795US	medium5.3	2.29% (83rd)	—	no fix	2022-09-21	5 versions
CVE-2020-8619US	medium4.9	2.10% (82nd)	—	no fix	2020-06-17	4 versions
CVE-2022-2906US	high7.5	2.07% (81st)	—	no fix	2022-09-21	2 versions
CVE-2022-3080US	high7.5	2.02% (81st)	—	no fix	2022-09-21	4 versions
CVE-2020-8618US	medium4.9	1.85% (79th)	—	no fix	2020-06-17	≤ 9.16.0 -> 9.16.3
CVE-2022-2881US	high8.2	1.42% (73rd)	—	no fix	2022-09-21	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-617Reachable Assertion11 CVEs
CWE-400Uncontrolled Resource Consumption7 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-401Missing Release of Memory after Effective Lifetime3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-347Improper Verification of Cryptographic Signature2 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan