The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
libdns in ISC BIND 9.10.0 before P2 does not properly handle EDNS options, which allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted packet, as demonstrated by an attack against named, dig, or delv.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Aug 30, 2017 | Jun 13, 2014 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jun 12, 2014 | Jun 11, 2014 |
| Suse | — | Upgrade python3-bindUpgrade bind-develUpgrade bindUpgrade bind-chrootenvUpgrade liblwres160Upgrade libisccc160Upgrade libirs-develUpgrade libisc1606Upgrade bind-docUpgrade libbind9-1600Upgrade libdns1605Upgrade libisccfg1600Upgrade libisc166Upgrade libisccc1600Upgrade libbind9-160Upgrade libirs160Upgrade libdns169Upgrade bind-utilsUpgrade libisccfg160Upgrade libns1604Upgrade libirs1601 | May 20, 2018 | Jun 13, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub