Patchfirst

Vendor

ISC

1 of 6 ISC CVEs in Patchfirst (17%) are in of vulnerabilities exploited in the wild.

CVEs
6
In CISA KEV
117%
Known ransomware use
0
Median days to KEV
4,089
from publication
Latest KEV listing
8 Oct 2026

Products

In KEVOther CVEs
  • BIND In KEV: 1 CVEs: 1
  • BIND9 In KEV: 0 CVEs: 3
  • BIND 9 In KEV: 0 CVEs: 1
  • ISC DHCP In KEV: 0 CVEs: 1

Top ATT&CK techniques

What attackers do with ISC CVEs

Counts are ISC CVEs linked to the technique. Each link’s provenance is on the CVE page.

ISC CVEs

6 CVEs, by priority
  1. CVE-2015-5477ISC BIND Data Processing Errors Vulnerability
    99.6%Top 0.05%
    68.2priority
  2. CVE-2020-8617A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c
    ISC · BIND9Public exploitHigh · 7.5
    93.3%Top 0.16%
    30.9priority
  3. CVE-2018-5740A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named
    ISC · BIND 9Public exploitHigh · 7.5
    60.2%Top 0.86%
    30.1priority
  4. CVE-2021-25216A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack
    ISC · BIND9High · 8.1
    83.0%Top 0.33%
    26.3priority
  5. CVE-2020-8625A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack
    ISC · BIND9High · 8.1
    64.2%Top 0.77%
    26.2priority
  6. CVE-2017-3144Failure to properly clean up closed OMAPI connections can exhaust available sockets
    ISC · ISC DHCPMedium · 5.3
    72.7%Top 0.55%
    23.6priority
↑ ↓ chooseEnter openEsc close