Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurred in an unusual order. Affects BIND 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0-P3, 9.11.1b1->9.11.1rc1, and 9.9.9-S8.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Jan 16, 2019 | Jan 16, 2019 |
| Amazon_linux | — | Upgrade bind | May 3, 2017 | Apr 12, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 16, 2019 |
| Centos_linux | — | Upgrade bind-pkcs11-develUpgrade bind-sdb-chrootUpgrade bind-pkcs11-libsUpgrade bind-licenseUpgrade bind-pkcs11Upgrade bind-debuginfoUpgrade bind-libs-liteUpgrade bind-lite-develUpgrade bind-pkcs11-utilsUpgrade bind-develUpgrade bindUpgrade bind-sdbUpgrade bind-utilsUpgrade bind-libsUpgrade bind-chroot | Apr 20, 2017 | Apr 12, 2017 |
| Debian | — | Upgrade bind9 | May 15, 2017 | Apr 12, 2017 |
| Dns Bind | — | Upgrade ISC BIND to latest version | May 15, 2017 | May 15, 2017 |
| Freebsd | — | Upgrade bind911Upgrade bind910Upgrade bind9-develUpgrade bind99 | Apr 13, 2017 | Apr 13, 2017 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Aug 17, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade bind-chrootUpgrade bind-utilsUpgrade bind-libs-liteUpgrade bindUpgrade bind-licenseUpgrade bind-libs | Oct 4, 2019 | Jan 16, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bindUpgrade bind-pkcs11-libsUpgrade bind-pkcs11Upgrade bind-licenseUpgrade bind-libsUpgrade bind-libs-liteUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-pkcs11-utils | Oct 4, 2019 | Jan 16, 2019 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4Upgrade service/network/dns/bind to version 9.10.6.1.0-0.175.3.35.0.3.0 on Solaris 11.3Upgrade network/dns/bind to version 9.10.6.1.0-0.175.3.35.0.3.0 on Solaris 11.3 | Aug 24, 2018 | Aug 24, 2018 |
| Oracle_linux | — | Upgrade bind-sdbUpgrade bindUpgrade bind-licenseUpgrade bind-libs-liteUpgrade bind-develUpgrade bind-lite-develUpgrade bind-libsUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11-develUpgrade bind-chrootUpgrade bind-sdb-chrootUpgrade bind-pkcs11Upgrade bind-pkcs11-libsUpgrade bind-utils | Apr 19, 2017 | Apr 12, 2017 |
| Redhat_linux | — | Upgrade bind-lite-develUpgrade bind-utilsUpgrade bind-debuginfoUpgrade bind-chrootUpgrade bind-sdbUpgrade bind-pkcs11-libsUpgrade bind-libs-liteUpgrade bind-libsUpgrade bind-pkcs11Upgrade bind-develNo solution existsUpgrade bindUpgrade bind-sdb-chrootUpgrade bind-pkcs11-utilsUpgrade bind-licenseUpgrade bind-pkcs11-devel | Apr 19, 2017 | Apr 12, 2017 |
| Suse | — | Upgrade libirs160Upgrade bind-libsUpgrade libisc1606Upgrade libdns1605Upgrade python3-bindUpgrade libbind9-160Upgrade bind-docUpgrade libbind9-1600Upgrade libirs1601Upgrade libisccc1600Upgrade libisccfg160Upgrade libirs-develUpgrade libdns169Upgrade libisc166Upgrade libisccfg1600Upgrade libns1604Upgrade bind-libs-x86Upgrade bind-chrootenvUpgrade bindUpgrade bind-libs-32bitUpgrade bind-utilsUpgrade libisccc160Upgrade liblwres160Upgrade python-bindUpgrade bind-devel-32bitUpgrade libisc166-32bitUpgrade bind-devel | Apr 13, 2017 | Apr 12, 2017 |
| Ubuntu | — | Upgrade bind9 | Apr 17, 2017 | Apr 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub