Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

ISC Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-13321`DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published07/22/2026	SeverityHigh
`CVE-2026-13204`Unexpected exit in certain situations with NSEC and NSEC3 both present	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published07/22/2026	SeverityHigh
`CVE-2026-12617`Record ordering based unexpected exit with CNAME or DNAME	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published07/22/2026	SeverityHigh
`CVE-2026-11721`Cache poisoning possible with label count discrepancy, RRSIG, and wildcards	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published07/22/2026	SeverityHigh
`CVE-2026-11622`Potential memory usage beyond configured limits	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published07/22/2026	SeverityHigh
`CVE-2026-11605`Unnecessary validation of DNSSEC signed records	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published07/22/2026	SeverityHigh
`CVE-2026-11331`Potential wildcard CNAME RPZ policy bypass	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published07/22/2026	SeverityHigh
`CVE-2026-10822`Key Record using PRIVATEDNS algorithm may lead to unexpected exit	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published07/22/2026	SeverityMedium
`CVE-2026-10723`Incorrect acceptance of NSEC3 records	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published07/22/2026	SeverityMedium
`CVE-2026-5950`Unbounded resend loop in BIND 9 resolver	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published05/20/2026	SeverityMedium
`CVE-2026-5947`SIG(0) validation during query flood may lead to undefined behavior	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published05/20/2026	SeverityHigh
`CVE-2026-5946`Invalid handling of CLASS != IN	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published05/20/2026	SeverityHigh
`CVE-2026-3593`Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published05/20/2026	SeverityHigh
`CVE-2026-3592`Amplification vulnerabilities via self-pointed glue records	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published05/20/2026	SeverityMedium
`CVE-2026-3039`BIND 9 server memory exhaustion during GSS-API TKEY negotiation	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published05/20/2026	SeverityHigh
`CVE-2026-3591`A stack use-after-return flaw in SIG(0) handling code may enable ACL bypass	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published03/25/2026	SeverityMedium
`CVE-2026-3119`Authenticated query containing a TKEY record may cause named to terminate unexpectedly	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published03/25/2026	SeverityMedium
`CVE-2026-3104`Memory leak in code preparing DNSSEC proofs of non-existence	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published03/25/2026	SeverityHigh
`CVE-2026-1519`Excessive NSEC3 iterations cause high CPU load during insecure delegation validation	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published03/25/2026	SeverityHigh
`CVE-2026-3608`Stack overflow in Kea daemons	Exploitation statusNot known exploited	FixYes	Affected productKea	Published03/25/2026	SeverityHigh
`CVE-2025-13878`Malformed BRID/HHIT records can cause named to terminate unexpectedly	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published01/21/2026	SeverityHigh
`CVE-2025-11232`Invalid characters cause assert	Exploitation statusNot known exploited	FixYes	Affected productKea	Published10/29/2025	SeverityHigh
`CVE-2025-40780`Cache poisoning due to weak PRNG	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published10/22/2025	SeverityHigh
`CVE-2025-40778`Cache poisoning attacks with unsolicited RRs	Exploitation statusPublic exploit	FixYes	Affected productBIND 9	Published10/22/2025	SeverityHigh
`CVE-2025-8677`Resource exhaustion via malformed DNSKEY handling	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published10/22/2025	SeverityHigh
`CVE-2025-8696`DoS attack against the Stork UI from an unauthenticated user	Exploitation statusNot known exploited	FixYes	Affected productStork	Published09/10/2025	SeverityHigh
`CVE-2025-40779`Kea crash upon interaction between specific client options and subnet selection	Exploitation statusNot known exploited	FixYes	Affected productKea	Published08/27/2025	SeverityHigh
`CVE-2025-40777`A possible assertion failure when 'stale-answer-client-timeout' is set to '0'	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published07/16/2025	SeverityHigh
`CVE-2025-40776`Birthday Attack against Resolvers supporting ECS	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published07/16/2025	SeverityHigh
`CVE-2025-32803`Insecure file permissions can result in confidential information leakage	Exploitation statusNot known exploited	FixYes	Affected productKea	Published05/28/2025	SeverityMedium
`CVE-2025-32802`Insecure handling of file paths allows multiple local attacks	Exploitation statusNot known exploited	FixYes	Affected productKea	Published05/28/2025	SeverityMedium
`CVE-2025-32801`Loading a malicious hook library can lead to local privilege escalation	Exploitation statusNot known exploited	FixYes	Affected productKea	Published05/28/2025	SeverityHigh
`CVE-2025-40775`DNS message with invalid TSIG causes an assertion failure	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published05/21/2025	SeverityHigh
`CVE-2024-12705`DNS-over-HTTPS implementation suffers from multiple issues under heavy query load	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published01/29/2025	SeverityHigh
`CVE-2024-11187`Many records in the additional section cause CPU exhaustion	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published01/29/2025	SeverityHigh
`CVE-2024-4076`Assertion failure when serving both stale cache data and authoritative zone content	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published07/23/2024	SeverityHigh
`CVE-2024-1975`SIG(0) can be used to exhaust CPU resources	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published07/23/2024	SeverityHigh
`CVE-2024-1737`BIND's database will be slow if a very large number of RRs exist at the same name	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published07/23/2024	SeverityHigh
`CVE-2024-0760`A flood of DNS messages over TCP may make the server unstable	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published07/23/2024	SeverityHigh
`CVE-2024-28872`Incorrect TLS certificate validation can lead to escalated privileges	Exploitation statusNot known exploited	FixYes	Affected productStork	Published07/11/2024	SeverityHigh
`CVE-2023-50868`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published02/14/2024	SeverityHigh
`CVE-2023-50387`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published02/14/2024	SeverityHigh
`CVE-2023-6516`Specific recursive query patterns may lead to an out-of-memory condition	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published02/13/2024	SeverityHigh
`CVE-2023-5680`Cleaning an ECS-enabled cache may cause excessive CPU load	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published02/13/2024	SeverityMedium
`CVE-2023-5679`Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published02/13/2024	SeverityHigh
`CVE-2023-5517`Querying RFC 1918 reverse zones may cause an assertion failure when "nxdomain-redirect" is enabled	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published02/13/2024	SeverityHigh
`CVE-2023-4408`Parsing large DNS messages may cause excessive CPU load	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published02/13/2024	SeverityHigh
`CVE-2023-4236`named may terminate unexpectedly under high DNS-over-TLS query load	Exploitation statusNot confirmed	FixYes	Affected productBIND 9	Published09/20/2023	SeverityHigh
`CVE-2023-3341`A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published09/20/2023	SeverityHigh
`CVE-2023-2911`Exceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published06/21/2023	SeverityHigh
`CVE-2023-2829`Malformed NSEC records can cause named to terminate unexpectedly when synth-from-dnssec is enabled	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published06/21/2023	SeverityHigh
`CVE-2023-2828`named's configured cache size limit can be significantly exceeded	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published06/21/2023	SeverityHigh
`CVE-2022-3924`named configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quota	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published01/25/2023	SeverityHigh
`CVE-2022-3736`named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published01/25/2023	SeverityHigh
`CVE-2022-3488`named may terminate unexpectedly when processing ECS options in repeated responses to iterative queries	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published01/25/2023	SeverityHigh
`CVE-2022-3094`An UPDATE message flood may cause named to exhaust all available memory	Exploitation statusNot known exploited	FixYes	Affected productBIND 9	Published01/25/2023	SeverityHigh
`CVE-2022-2929`DHCP memory leak	Exploitation statusNot confirmed	FixYes	Affected productISC DHCP	Published10/07/2022	SeverityMedium
`CVE-2022-2928`An option refcount overflow exists in dhcpd	Exploitation statusNot confirmed	FixYes	Affected productISC DHCP	Published10/07/2022	SeverityMedium
`CVE-2022-3080`BIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedly	Exploitation statusNot known exploited	FixYes	Affected productBIND9	Published09/21/2022	SeverityHigh
`CVE-2022-38178`Memory leaks in EdDSA DNSSEC verification code	Exploitation statusNot known exploited	FixYes	Affected productBIND9	Published09/21/2022	SeverityHigh
`CVE-2022-38177`Memory leak in ECDSA DNSSEC verification code	Exploitation statusNot known exploited	FixYes	Affected productBIND9	Published09/21/2022	SeverityHigh
`CVE-2022-2906`Memory leaks in code handling Diffie-Hellman key exchange via TKEY RRs (OpenSSL 3.0.0+ only)	Exploitation statusNot known exploited	FixYes	Affected productBIND9	Published09/21/2022	SeverityHigh
`CVE-2022-2881`Buffer overread in statistics channel code	Exploitation statusNot known exploited	FixYes	Affected productBIND9	Published09/21/2022	SeverityMedium
`CVE-2022-2795`Processing large delegations may severely degrade resolver performance	Exploitation statusNot known exploited	FixYes	Affected productBIND9	Published09/21/2022	SeverityMedium
`CVE-2022-1183`Destroying a TLS session early causes assertion failure	Exploitation statusNot confirmed	FixYes	Affected productBIND9	Published05/19/2022	SeverityHigh
`CVE-2021-25220`DNS forwarders - cache poisoning vulnerability	Exploitation statusNot confirmed	FixYes	Affected productBIND	Published03/23/2022	SeverityMedium
`CVE-2022-0635`	Exploitation statusNot confirmed	FixYes	Affected productBIND	Published03/23/2022	SeverityHigh
`CVE-2022-0396`DoS from specifically crafted TCP packets	Exploitation statusNot confirmed	FixYes	Affected productBIND	Published03/23/2022	SeverityMedium
`CVE-2022-0667`Assertion failure on delayed DS lookup	Exploitation statusNot confirmed	FixYes	Affected productBIND	Published03/22/2022	SeverityHigh
`CVE-2021-25219`Lame cache can be abused to severely degrade resolver performance	Exploitation statusNot confirmed	FixYes	Affected productBIND9	Published10/27/2021	SeverityMedium
`CVE-2021-25218`A too-strict assertion check could be triggered when responses in BIND 9.16.19 and 9.17.16 require UDP fragmentation if RRL is in use	Exploitation statusNot confirmed	FixYes	Affected productBIND9	Published08/18/2021	SeverityHigh
`CVE-2021-25217`A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient	Exploitation statusNot confirmed	FixYes	Affected productISC DHCP	Published05/26/2021	SeverityHigh
`CVE-2021-25216`A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack	Exploitation statusNot confirmed	FixYes	Affected productBIND9	Published04/29/2021	SeverityHigh
`CVE-2021-25215`An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself	Exploitation statusNot confirmed	FixYes	Affected productBIND9	Published04/29/2021	SeverityHigh
`CVE-2021-25214`A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly	Exploitation statusNot confirmed	FixYes	Affected productBIND9	Published04/29/2021	SeverityMedium
`CVE-2020-8625`A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack	Exploitation statusNot confirmed	FixYes	Affected productBIND9	Published02/17/2021	SeverityHigh
`CVE-2020-8624`update-policy rules of type "subdomain" are enforced incorrectly	Exploitation statusNot confirmed	FixYes	Affected productBIND9	Published08/21/2020	SeverityMedium
`CVE-2020-8623`A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c	Exploitation statusNot confirmed	FixYes	Affected productBIND9	Published08/21/2020	SeverityHigh
`CVE-2020-8622`A truncated TSIG response can lead to an assertion failure	Exploitation statusNot confirmed	FixYes	Affected productBIND9	Published08/21/2020	SeverityMedium
`CVE-2020-8621`Attempting QNAME minimization after forwarding can lead to an assertion failure in resolver.c	Exploitation statusNot confirmed	FixYes	Affected productBIND9	Published08/21/2020	SeverityHigh
`CVE-2020-8620`	Exploitation statusNot confirmed	FixYes	Affected productBIND9	Published08/21/2020	SeverityHigh
`CVE-2020-8619`A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer	Exploitation statusNot confirmed	FixYes	Affected productBIND9	Published06/17/2020	SeverityMedium
`CVE-2020-8618`A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer	Exploitation statusNot confirmed	FixYes	Affected productBIND9	Published06/17/2020	SeverityMedium
`CVE-2020-8617`A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c	Exploitation statusNot confirmed	FixYes	Affected productBIND9	Published05/19/2020	SeverityHigh
`CVE-2020-8616`BIND does not sufficiently limit the number of fetches performed when processing referrals	Exploitation statusNot confirmed	FixYes	Affected productBIND9	Published05/19/2020	SeverityHigh
`CVE-2019-6477`TCP-pipelined queries can bypass tcp-clients limit	Exploitation statusNot confirmed	FixYes	Affected productBIND9	Published11/26/2019	SeverityHigh
`CVE-2013-5661`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published11/05/2019	SeverityUnknown
`CVE-2019-6470`dhcpd: use-after-free error leads crash in IPv6 mode when using mismatched BIND libraries	Exploitation statusNot confirmed	FixNot confirmed	Affected productdhcpd	Published11/01/2019	SeverityMedium
`CVE-2018-5742`An oversight while backporting a feature leads to an assertion failure in buffer.c:420	Exploitation statusNot confirmed	FixNot confirmed	Affected productBIND9	Published10/30/2019	SeverityMedium
`CVE-2019-6476`An error in QNAME minimization code can cause BIND to exit with an assertion failure	Exploitation statusNot confirmed	FixYes	Affected productBIND 9	Published10/17/2019	SeverityMedium
`CVE-2019-6475`A flaw in mirror zone validity checking can allow zone data to be spoofed	Exploitation statusNot confirmed	FixYes	Affected productBIND 9	Published10/17/2019	SeverityMedium
`CVE-2019-6474`A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate	Exploitation statusNot confirmed	FixYes	Affected productKea	Published10/16/2019	SeverityMedium
`CVE-2019-6473`A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate	Exploitation statusNot confirmed	FixYes	Affected productKea	Published10/16/2019	SeverityMedium
`CVE-2019-6472`A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate	Exploitation statusNot confirmed	FixYes	Affected productKea	Published10/16/2019	SeverityMedium
`CVE-2019-6471`A race condition when discarding malformed packets can cause BIND to exit with an assertion failure	Exploitation statusNot confirmed	FixYes	Affected productBIND 9	Published10/09/2019	SeverityMedium
`CVE-2019-6469`BIND Supported Preview Edition can exit with an assertion failure if ECS is in use	Exploitation statusNot confirmed	FixYes	Affected productBIND 9 Supported Preview Edition	Published10/09/2019	SeverityMedium
`CVE-2019-6468`BIND Supported Preview Edition can exit with an assertion failure if nxdomain-redirect is used	Exploitation statusNot confirmed	FixYes	Affected productBIND 9 Supported Preview Edition	Published10/09/2019	SeverityMedium
`CVE-2019-6467`An error in the nxdomain redirect feature can cause BIND to exit with an INSIST assertion failure in query.c	Exploitation statusNot confirmed	FixYes	Affected productBIND 9	Published10/09/2019	SeverityMedium
`CVE-2019-6465`Zone transfer controls for writable DLZ zones were not effective	Exploitation statusNot confirmed	FixYes	Affected productBIND 9	Published10/09/2019	SeverityMedium
`CVE-2018-5745`An assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys	Exploitation statusNot confirmed	FixYes	Affected productBIND 9	Published10/09/2019	SeverityMedium