Known vulnerabilities in ISC BIND 9.11.24

Vendor: ISC
Software: ISC BIND
Version: 9.11.24
Software CPE: cpe:2.3:a:isc:isc_bind:*:*:*:*:*:*:*:*
Total vulnerabilities: 19
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ISC BIND version 9.11.24 ISC BIND 9.11.24 is affected by 19 vulnerabilities: 2 high, 16 medium, 1 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124616 - Resource exhaustion
CVE-2026-1519
CWE-400 Medium
No
No
9.18.47, 9.18.47-S1, 9.20.21, 9.20.21-S1, 9.21.20 25.03.2026 SB20260325207
SB20260325210
SB20260325211
and 40 more
#VU117610 - Insufficient Verification of Data Authenticity
CVE-2025-40778
CWE-345 Medium
Public exploit available
No
9.18.41, 9.18.41-S1, 9.20.15, 9.20.15-S1, 9.21.14 23.10.2025 SB2025102373
SB2025102393
SB20251023133
and 60 more
#VU103436 - Resource exhaustion
CVE-2024-11187
CWE-400 Medium
No
No
9.18.33, 9.18.33-S1, 9.20.5, 9.21.4 29.01.2025 SB2025012962
SB2025012964
SB2025012965
and 83 more
#VU94711 - Resource exhaustion
CVE-2024-1975
CWE-400 Medium
No
No
9.18.28, 9.18.28-S1, 9.20.0 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 72 more
#VU94710 - Resource Management Errors
CVE-2024-1737
CWE-399 Medium
No
No
9.18.28, 9.18.28-S1, 9.20.0 24.07.2024 SB2024072415
SB2024072417
SB2024072418
and 73 more
#VU80931 - Resource exhaustion
CVE-2023-3341
CWE-400 Medium
No
No
9.16.44, 9.16.44-S1, 9.18.19, 9.18.19-S1, 9.19.17 20.09.2023 SB2023092048
SB2023092050
SB2023092148
and 90 more
#VU77612 - Resource exhaustion
CVE-2023-2828
CWE-400 Medium
No
No
9.16.42, 9.16.42-S1, 9.18.16, 9.18.16-S1, 9.19.14 21.06.2023 SB2023062155
SB2023062201
SB2023062601
and 66 more
#VU71529 - Resource exhaustion
CVE-2022-3094
CWE-400 Medium
No
No
9.16.37, 9.16.37-S1, 9.18.11, 9.19.9 25.01.2023 SB2023012556
SB2023012559
SB2023012602
and 47 more
#VU67550 - Missing release of memory after effective lifetime
CVE-2022-38178
CWE-401 Medium
No
No
9.16.33, 9.16.33-S1, 9.18.7, 9.19.5 21.09.2022 SB2022092131
SB2022092140
SB2022092147
and 48 more
#VU67549 - Missing release of memory after effective lifetime
CVE-2022-38177
CWE-401 Medium
No
No
9.16.33, 9.16.33-S1 21.09.2022 SB2022092131
SB2022092140
SB2022092143
and 52 more
#VU67545 - Resource Management Errors
CVE-2022-2795
CWE-399 Medium
No
No
9.16.33, 9.16.33-S1, 9.18.7, 9.19.5 21.09.2022 SB2022092131
SB2022092140
SB2022092143
and 71 more
#VU61423 - Resource Management Errors
CVE-2022-0396
CWE-399 Medium
No
No
9.16.27, 9.16.27-S1, 9.18.1 17.03.2022 SB2022031701
SB2022031719
SB2022031728
and 17 more
#VU61422 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2021-25220
CWE-350 Medium
No
No
9.11.37, 9.11.37-S1, 9.16.27, 9.16.27-S1, 9.18.1 17.03.2022 SB2022031701
SB2022031719
SB2022031725
and 57 more
#VU57752 - Resource exhaustion
CVE-2021-25219
CWE-400 Medium
No
No
9.11.36, 9.11.36-S1, 9.16.22, 9.16.22-S1, 9.17.19 28.10.2021 SB2021102801
SB2021102903
SB2021110111
and 33 more
#VU52737 - Memory corruption
CVE-2021-25216
CWE-119 High
No
No
9.11.31, 9.11.31-S1, 9.16.15, 9.16.15-S1, 9.17.2 29.04.2021 SB2021042903
SB2021042904
SB2021042928
and 8 more
#VU52736 - Reachable Assertion
CVE-2021-25215
CWE-617 Medium
No
No
9.11.31, 9.11.31-S1, 9.16.15, 9.16.15-S1, 9.17.12 29.04.2021 SB2021042903
SB2021042904
SB2021042928
and 42 more
#VU52734 - Reachable Assertion
CVE-2021-25214
CWE-617 Low
No
No
9.11.31, 9.11.31-S1, 9.16.15, 9.16.15-S1, 9.17.12 29.04.2021 SB2021042903
SB2021042904
SB2021042928
and 25 more
#VU50780 - Memory corruption
CVE-2020-8625
CWE-119 High
No
No
9.11.28, 9.11.28-S1, 9.16.12, 9.16.12-S1, 9.17.2 17.02.2021 SB2021021718
SB2021021908
SB2021022703
and 28 more
#VU48663 - NULL Pointer Dereference
CWE-476 Medium
No
No
9.11.25, 9.11.25-S1 26.11.2020 SB2020112604
SB2020112606