ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
CVSS Details
- CVSS 3.1 Base Score: 8.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Aug 30, 2017 | Jun 5, 2012 |
| Apple Osx Bind | — | Upgrade macOS to the latest version | Sep 27, 2012 | Jun 5, 2012 |
| Apple Osx Note | — | Apply OS X security update 2012-004Upgrade macOS to the latest version | Aug 28, 2015 | Jun 5, 2012 |
| Centos_linux | — | Upgrade bind97-libsUpgrade bindUpgrade bind-chrootUpgrade bind97-utilsUpgrade caching-nameserverUpgrade bind-libbind-develUpgrade bind97-chrootUpgrade bind-sdbUpgrade bind97-develUpgrade bind-develUpgrade bind-utilsUpgrade bind97Upgrade bind-libs | Dec 1, 2016 | Jun 5, 2012 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Jun 5, 2012 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jun 11, 2012 | Jun 4, 2012 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 26, 2014 |
| Freebsd | — | Upgrade bind99Upgrade bind96Upgrade FreeBSDUpgrade bind98Upgrade bind97 | Dec 10, 2025 | Jun 27, 2012 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Jun 5, 2012 |
| Hpux | — | Update NameService.BIND-AUX to the latest versionUpdate BindUpgrade.BIND2-UPGRADE to the latest versionUpdate NameService.BIND-RUN to the latest versionUpdate BindUpgrade.BIND-UPGRADE to the latest version | Aug 11, 2017 | Jun 5, 2012 |
| Ibm Aix | — | Apply the fix or workaround for bind9_advisory4 | Nov 30, 2017 | Jun 5, 2012 |
| Oracle Solaris | — | Upgrade service/network/dns/bind to version 9.6.3.7.1-0.175.0.9.0.4.0 on Solaris 11.0Upgrade network/dns/bind to version 9.6.3.7.1-0.175.0.9.0.4.0 on Solaris 11.0 | May 29, 2017 | Jun 5, 2012 |
| Oracle_linux | — | Upgrade bind97-utilsUpgrade bind97-develUpgrade bind97-chrootUpgrade bind97-libsUpgrade bind97 | Oct 16, 2024 | Jun 5, 2012 |
| Redhat_linux | — | — | Jul 9, 2025 | Jun 4, 2012 |
| Suse | — | Upgrade bind-modules-mysqlUpgrade libisc166-32bitUpgrade python3-bindUpgrade libisc166Upgrade libisccc160Upgrade bind-utilsUpgrade bind-libs-x86Upgrade bind-modules-genericUpgrade python-bindUpgrade libisccfg160Upgrade libbind9-160Upgrade bind-modules-sqlite3Upgrade bind-libs-32bitUpgrade bind-modules-ldapUpgrade libdns169Upgrade bind-docUpgrade liblwres160Upgrade bind-devel-32bitUpgrade bind-modules-perlUpgrade bind-libsUpgrade libirs-develUpgrade bind-chrootenvUpgrade bindUpgrade libirs160Upgrade bind-devel | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade libdns64Upgrade libdns69Upgrade libdns81Upgrade libdns36 | Nov 8, 2024 | Jun 5, 2012 |
| Vmsa 2012 0016 | — | Upgrade VMware ESX 4.1 to build number 874690 | Nov 22, 2012 | Jun 5, 2012 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub