ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does not properly initialize the failing-query cache, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) by sending many queries.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Aug 30, 2017 | Jul 25, 2012 |
| Apple Osx Apache | — | Apply OS X security update 2013-004Upgrade macOS to the latest version | Aug 28, 2015 | Jul 25, 2012 |
| Apple Osx Bind | — | Upgrade macOS to the latest versionApply OS X security update 2013-004 | Sep 17, 2013 | Jul 25, 2012 |
| Centos_linux | — | Upgrade bind-chrootUpgrade bind97-chrootUpgrade bind97-utilsUpgrade bind-utilsUpgrade bind-develUpgrade caching-nameserverUpgrade bind97-develUpgrade bind97Upgrade bind-libbind-develUpgrade bind-sdbUpgrade bind97-libsUpgrade bind-libsUpgrade bind | Dec 1, 2016 | Jul 25, 2012 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Jul 25, 2012 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Aug 23, 2012 | Jul 24, 2012 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 26, 2014 |
| Freebsd | — | Upgrade bind99Upgrade bind96Upgrade FreeBSDUpgrade bind98Upgrade bind97 | Dec 10, 2025 | Aug 7, 2012 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Jul 25, 2012 |
| Hpux | — | Update NameService.BIND-AUX to the latest versionUpdate NameService.BIND-RUN to the latest versionUpdate BindUpgrade.BIND2-UPGRADE to the latest versionUpdate BindUpgrade.BIND-UPGRADE to the latest version | Aug 11, 2017 | Jul 25, 2012 |
| Oracle Solaris | — | Upgrade network/dns/bind to version 9.6.3.7.2-0.175.0.10.0.5.0 on Solaris 11.0Upgrade service/network/dns/bind to version 9.6.3.7.2-0.175.0.10.0.5.0 on Solaris 11.0 | May 29, 2017 | Jul 25, 2012 |
| Oracle_linux | — | Upgrade bindUpgrade bind-develUpgrade bind-libsUpgrade bind-utilsUpgrade caching-nameserverUpgrade bind-chrootUpgrade bind-libbind-develUpgrade bind-sdb | Oct 16, 2024 | Jul 25, 2012 |
| Suse | — | Upgrade bind-libs-x86Upgrade liblwres160Upgrade libisccfg160Upgrade bind-docUpgrade libbind9-160Upgrade libdns169Upgrade bindUpgrade python3-bindUpgrade libisc166Upgrade bind-modules-sqlite3Upgrade bind-libsUpgrade bind-modules-mysqlUpgrade bind-devel-32bitUpgrade bind-chrootenvUpgrade bind-utilsUpgrade bind-modules-ldapUpgrade bind-libs-32bitUpgrade bind-modules-genericUpgrade bind-modules-perlUpgrade libirs160Upgrade libirs-develUpgrade libisccc160Upgrade bind-develUpgrade python-bindUpgrade libisc166-32bit | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libdns81Upgrade libdns64Upgrade libdns69 | Nov 8, 2024 | Jul 25, 2012 |
| Vmsa 2012 0016 | — | Upgrade VMware ESX 4.1 to build number 874690 | Nov 22, 2012 | Jul 25, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub