Vulnerabilities > ISC > Bind > 9.9.8

DATE CVE VULNERABILITY TITLE RISK
2015-09-05 CVE-2015-5722 Improper Input Validation vulnerability in multiple products
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.
network
low complexity
isc apple CWE-20
7.8
2015-07-29 CVE-2015-5477 Data Processing Errors vulnerability in ISC Bind
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
network
low complexity
isc CWE-19
7.8