The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
resolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cookies are enabled, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed packet with more than one cookie option.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Aug 30, 2017 | Mar 9, 2016 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Aug 2, 2016 | Mar 9, 2016 |
| Freebsd | — | Upgrade bind910Upgrade bind9-devel | Dec 10, 2025 | Mar 28, 2016 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Mar 9, 2016 |
| Suse | — | Upgrade libirs160Upgrade libisc166Upgrade libisccc160Upgrade bind-chrootenvUpgrade libbind9-160Upgrade bind-utilsUpgrade libdns1605Upgrade bind-develUpgrade libisccc1600Upgrade libisccfg1600Upgrade python3-bindUpgrade libns1604Upgrade libirs1601Upgrade libisccfg160Upgrade libirs-develUpgrade libisc1606Upgrade bindUpgrade libbind9-1600Upgrade libdns169Upgrade liblwres160Upgrade bind-doc | May 20, 2018 | Mar 9, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub