named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit, or daemon crash) by triggering an incorrect trust-anchor management scenario in which no key is ready for use.
CVSS Details
- CVSS 3.1 Base Score: 5.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Aug 30, 2017 | Feb 18, 2015 |
| Centos_linux | — | Upgrade bind-libsUpgrade bind-sdb-chrootUpgrade bind-licenseUpgrade bind-develUpgrade bind-utilsUpgrade bind-sdbUpgrade bindUpgrade bind-lite-develUpgrade bind-chrootUpgrade bind-libs-lite | Dec 1, 2016 | Feb 18, 2015 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Feb 19, 2015 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jun 8, 2015 | Feb 18, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 16, 2015 |
| Freebsd | — | Upgrade bind99-baseUpgrade FreeBSDUpgrade bind99Upgrade bind910-baseUpgrade bind910 | Dec 10, 2025 | Feb 23, 2015 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Feb 18, 2015 |
| Hpux | — | Update NameService.BIND-RUN to the latest versionUpdate NameService.BIND-AUX to the latest version | Aug 11, 2017 | Feb 18, 2015 |
| Oracle_linux | — | Upgrade bind-chrootUpgrade bind-lite-develUpgrade bind-libs-liteUpgrade bind-utilsUpgrade bind-licenseUpgrade bind-develUpgrade bind-sdb-chrootUpgrade bindUpgrade bind-sdbUpgrade bind-libs | Oct 16, 2024 | Feb 19, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 20, 2015 |
| Suse | — | Upgrade bind-devel-32bitUpgrade bindUpgrade libirs160Upgrade libirs-develUpgrade libisc166Upgrade bind-libsUpgrade bind-chrootenvUpgrade libbind9-160Upgrade bind-develUpgrade bind-libs-32bitUpgrade bind-utilsUpgrade libisc166-32bitUpgrade libisccfg160Upgrade bind-libs-x86Upgrade python-bindUpgrade libns1604Upgrade libisccfg1600Upgrade libbind9-1600Upgrade libirs1601Upgrade bind-docUpgrade libisccc1600Upgrade liblwres160Upgrade libisccc160Upgrade libisc1606Upgrade python3-bindUpgrade libdns1605Upgrade libdns169 | Dec 18, 2015 | Feb 18, 2015 |
| Ubuntu | — | Upgrade bind9 | Nov 8, 2024 | Feb 19, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub