The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Aug 30, 2017 | Jan 13, 2014 |
| Centos_linux | — | Upgrade bind97-utilsUpgrade bind97-libsUpgrade bind-develUpgrade bind97-develUpgrade bindUpgrade bind-libsUpgrade bind97Upgrade bind97-chrootUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-sdb | Dec 1, 2016 | Jan 13, 2014 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Jan 14, 2014 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jan 15, 2014 | Jan 13, 2014 |
| Freebsd | — | Upgrade bind98Upgrade bind99Upgrade FreeBSDUpgrade bind99-baseUpgrade bind98-baseUpgrade bind96-baseUpgrade bind96 | Dec 10, 2025 | Jan 13, 2014 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Jan 13, 2014 |
| Hpux | — | Update NameService.BIND-RUN to the latest versionUpdate NameService.BIND-AUX to the latest version | Aug 11, 2017 | Jan 13, 2014 |
| Oracle Solaris | — | Upgrade network/dns/bind to version 9.6.3.10.2-0.175.1.16.0.3.0 on Solaris 11.1Upgrade service/network/dns/bind to version 9.6.3.10.2-0.175.1.16.0.3.0 on Solaris 11.1 | May 29, 2017 | Jan 13, 2014 |
| Oracle_linux | — | Upgrade bindUpgrade bind-chrootUpgrade bind97-utilsUpgrade bind-sdbUpgrade bind-utilsUpgrade bind97Upgrade bind97-libsUpgrade bind-develUpgrade bind97-develUpgrade bind97-chrootUpgrade bind-libs | Oct 16, 2024 | Jan 14, 2014 |
| Suse | — | Upgrade libirs-develUpgrade bindUpgrade bind-devel-32bitUpgrade liblwres160Upgrade libdns169Upgrade python-bindUpgrade bind-docUpgrade bind-libs-32bitUpgrade bind-libsUpgrade bind-develUpgrade bind-utilsUpgrade bind-libs-x86Upgrade libisc166-32bitUpgrade libbind9-160Upgrade python3-bindUpgrade bind-chrootenvUpgrade libisccfg160Upgrade libisccc160Upgrade libirs160Upgrade libisc166 | Dec 18, 2015 | Jan 13, 2014 |
| Ubuntu | — | Upgrade bind9 | Nov 8, 2024 | Jan 14, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub