{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: ISC vulnerabilities","home_page_url":"https://patchfirst.co/vendor/isc/","feed_url":"https://patchfirst.co/feed/vendor/isc.json","description":"New and newly exploited ISC CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2015-5477#kev","url":"https://patchfirst.co/cve/CVE-2015-5477/","title":"[KEV] CVE-2015-5477: ISC BIND Data Processing Errors Vulnerability","content_text":"ISC · BIND. In CISA KEV since 2026-10-08. ENISA EUVD lists it as exploited. EPSS 99.6% (higher than 99.95% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 68.2 of 100.","summary":"ISC BIND Data Processing Errors Vulnerability","date_published":"2026-10-08T00:00:00.000Z","date_modified":"2026-10-09T19:12:37.000Z","tags":["kev","public-exploit","T1190","T1499.004"],"_patchfirst":{"reason":"kev","priority":68.2,"kev":{"dateAdded":"2026-10-08","ransomware":false},"epss":{"score":0.99584,"percentile":0.99947},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"ISC","product":"BIND","techniqueIds":["T1190","T1499.004"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-25216","url":"https://patchfirst.co/cve/CVE-2021-25216/","title":"CVE-2021-25216: A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack","content_text":"ISC · BIND9. Not in CISA KEV. EPSS 83.0% (higher than 99.67% of CVEs). CVSS 8.1 HIGH. Priority 26.3 of 100.","summary":"A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack","date_published":"2021-04-29T00:00:00.000Z","date_modified":"2024-09-16T22:25:23.000Z","tags":[],"_patchfirst":{"reason":"published","priority":26.3,"kev":null,"epss":{"score":0.82992,"percentile":0.99673},"cvss":{"score":8.1,"severity":"HIGH","version":"3.1"},"vendor":"ISC","product":"BIND9","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-8625","url":"https://patchfirst.co/cve/CVE-2020-8625/","title":"CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack","content_text":"ISC · BIND9. Not in CISA KEV. EPSS 64.2% (higher than 99.23% of CVEs). CVSS 8.1 HIGH. Priority 26.2 of 100.","summary":"A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack","date_published":"2021-02-17T00:00:00.000Z","date_modified":"2024-09-16T22:40:02.000Z","tags":[],"_patchfirst":{"reason":"published","priority":26.2,"kev":null,"epss":{"score":0.64161,"percentile":0.99228},"cvss":{"score":8.1,"severity":"HIGH","version":"3.1"},"vendor":"ISC","product":"BIND9","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-8617","url":"https://patchfirst.co/cve/CVE-2020-8617/","title":"CVE-2020-8617: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c","content_text":"ISC · BIND9. Not in CISA KEV. EPSS 93.3% (higher than 99.84% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 30.9 of 100.","summary":"A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c","date_published":"2020-05-19T00:00:00.000Z","date_modified":"2024-09-16T20:26:32.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":30.9,"kev":null,"epss":{"score":0.93332,"percentile":0.99837},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"ISC","product":"BIND9","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2018-5740","url":"https://patchfirst.co/cve/CVE-2018-5740/","title":"CVE-2018-5740: A flaw in the \"deny-answer-aliases\" feature can cause an assertion failure in named","content_text":"ISC · BIND 9. Not in CISA KEV. EPSS 60.2% (higher than 99.14% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 30.1 of 100.","summary":"A flaw in the \"deny-answer-aliases\" feature can cause an assertion failure in named","date_published":"2019-01-16T00:00:00.000Z","date_modified":"2024-09-16T17:58:43.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":30.1,"kev":null,"epss":{"score":0.60236,"percentile":0.99136},"cvss":{"score":7.5,"severity":"HIGH","version":"3.0"},"vendor":"ISC","product":"BIND 9","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2017-3144","url":"https://patchfirst.co/cve/CVE-2017-3144/","title":"CVE-2017-3144: Failure to properly clean up closed OMAPI connections can exhaust available sockets","content_text":"ISC · ISC DHCP. Not in CISA KEV. EPSS 72.7% (higher than 99.45% of CVEs). CVSS 5.3 MEDIUM. Priority 23.6 of 100.","summary":"Failure to properly clean up closed OMAPI connections can exhaust available sockets","date_published":"2019-01-16T00:00:00.000Z","date_modified":"2024-09-16T22:46:13.000Z","tags":[],"_patchfirst":{"reason":"published","priority":23.6,"kev":null,"epss":{"score":0.72724,"percentile":0.99446},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.0"},"vendor":"ISC","product":"ISC DHCP","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}