CVE-2005-0033: ISC BIND

Medium severity, CVSS 5.0. EPSS: 11.4% chance of exploitation in the next 30 days.

Buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote attackers to cause a denial of service (crash) via queries that trigger the overflow in the q_usedns array that tracks nameservers and addresses.

Affected products

• ISC BIND: version 8.4.4 only; version 8.4.5 only

Published 2005-05-02. Last modified 2026-06-16.