ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
CVSS Details
- CVSS 3.1 Base Score: 8.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Aug 30, 2017 | Jun 5, 2012 |
| Apple Osx Bind | — | Upgrade macOS to the latest version | Sep 27, 2012 | Jun 5, 2012 |
| Apple Osx Note | — | Apply OS X security update 2012-004Upgrade macOS to the latest version | Aug 28, 2015 | Jun 5, 2012 |
| Centos_linux | — | Upgrade bind-utilsUpgrade bind97Upgrade bind-develUpgrade bind-libsUpgrade bind-sdbUpgrade bind-libbind-develUpgrade bind97-develUpgrade bind97-libsUpgrade bindUpgrade bind97-chrootUpgrade caching-nameserverUpgrade bind97-utilsUpgrade bind-chroot | Dec 1, 2016 | Jun 5, 2012 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Jun 5, 2012 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jun 11, 2012 | Jun 4, 2012 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 26, 2014 |
| Freebsd | — | Upgrade bind96Upgrade bind99Upgrade bind98Upgrade bind97Upgrade FreeBSD | Dec 10, 2025 | Jun 27, 2012 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Jun 5, 2012 |
| Hpux | — | Update BindUpgrade.BIND-UPGRADE to the latest versionUpdate NameService.BIND-RUN to the latest versionUpdate BindUpgrade.BIND2-UPGRADE to the latest versionUpdate NameService.BIND-AUX to the latest version | Aug 11, 2017 | Jun 5, 2012 |
| Ibm Aix | — | Apply the fix or workaround for bind9_advisory4 | Nov 30, 2017 | Jun 5, 2012 |
| Oracle Solaris | — | Upgrade service/network/dns/bind to version 9.6.3.7.1-0.175.0.9.0.4.0 on Solaris 11.0Upgrade network/dns/bind to version 9.6.3.7.1-0.175.0.9.0.4.0 on Solaris 11.0 | May 29, 2017 | Jun 5, 2012 |
| Oracle_linux | — | Upgrade bind97Upgrade bind97-develUpgrade bind97-libsUpgrade bind97-chrootUpgrade bind97-utils | Oct 16, 2024 | Jun 5, 2012 |
| Redhat_linux | — | — | Jul 9, 2025 | Jun 4, 2012 |
| Suse | — | Upgrade bind-devel-32bitUpgrade bind-modules-perlUpgrade bind-modules-ldapUpgrade libirs-develUpgrade bind-libsUpgrade libdns169Upgrade bind-docUpgrade bindUpgrade bind-chrootenvUpgrade bind-modules-sqlite3Upgrade bind-libs-32bitUpgrade libirs160Upgrade liblwres160Upgrade bind-develUpgrade python-bindUpgrade bind-utilsUpgrade libisc166-32bitUpgrade libisc166Upgrade bind-libs-x86Upgrade bind-modules-genericUpgrade libisccfg160Upgrade python3-bindUpgrade libbind9-160Upgrade libisccc160Upgrade bind-modules-mysql | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade libdns64Upgrade libdns69Upgrade libdns36Upgrade libdns81 | Nov 8, 2024 | Jun 5, 2012 |
| Vmsa 2012 0016 | — | Upgrade VMware ESX 4.1 to build number 874690 | Nov 22, 2012 | Jun 5, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub