BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Jan 16, 2019 | Jan 16, 2019 |
| Amazon Linux Ami 2 | — | Upgrade bind-develUpgrade bind-pkcs11-utilsUpgrade bind-chrootUpgrade bind-libs-liteUpgrade bind-utilsUpgrade bind-pkcs11-libsUpgrade bind-sdb-chrootUpgrade bind-libsUpgrade bind-lite-develUpgrade bind-pkcs11-develUpgrade bind-pkcs11Upgrade bind-licenseUpgrade bind-sdbUpgrade bind-debuginfoUpgrade bind | Apr 27, 2020 | Jan 16, 2019 |
| Amazon_linux | — | Upgrade bind | Feb 22, 2018 | Jan 17, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 16, 2019 |
| Centos_linux | — | Upgrade bind-pkcs11-libsUpgrade bind-chrootUpgrade bind-pkcs11Upgrade bind-libsUpgrade bind-utilsUpgrade bind-sdbUpgrade bind-debuginfoUpgrade bind-libs-liteUpgrade bindUpgrade bind-lite-develUpgrade bind-develUpgrade bind-pkcs11-utilsUpgrade bind-sdb-chrootUpgrade bind-licenseUpgrade bind-pkcs11-devel | Jan 24, 2018 | Jan 17, 2018 |
| Debian | — | Upgrade bind9 | Jan 18, 2018 | Jan 16, 2018 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jan 18, 2018 | Jan 18, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 23, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade bind-libs-liteUpgrade bindUpgrade bind-licenseUpgrade bind-utilsUpgrade bind-chrootUpgrade bind-libs | Feb 13, 2018 | Jan 16, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bind-pkcs11-libsUpgrade bind-licenseUpgrade bind-libs-liteUpgrade bind-chrootUpgrade bind-libsUpgrade bind-utilsUpgrade bind-pkcs11Upgrade bind-pkcs11-utilsUpgrade bind | Feb 13, 2018 | Jan 16, 2018 |
| Oracle Solaris | — | Upgrade service/network/dns/bind to version 9.10.6.1.0-0.175.3.35.0.3.0 on Solaris 11.3Upgrade service/network/dhcp/isc-dhcp to version 4.3.6.0.1-0.175.3.30.0.4.0 on Solaris 11.3Upgrade network/dns/bind to version 9.10.6.1.0-0.175.3.35.0.3.0 on Solaris 11.3 | Mar 21, 2018 | Mar 21, 2018 |
| Oracle_linux | — | Upgrade bind-chrootUpgrade bind-libs-liteUpgrade bind-pkcs11-develUpgrade bind-utilsUpgrade bind-lite-develUpgrade bind-pkcs11-libsUpgrade bindUpgrade bind-sdbUpgrade bind-licenseUpgrade bind-pkcs11Upgrade bind-sdb-chrootUpgrade bind-libsUpgrade bind-pkcs11-utilsUpgrade bind-devel | Jan 24, 2018 | Jan 16, 2018 |
| Redhat_linux | — | Upgrade bind-sdbUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-develUpgrade bind-licenseUpgrade bind-libsUpgrade bind-lite-develUpgrade bind-utilsNo solution existsUpgrade bind-chrootUpgrade bindUpgrade bind-pkcs11Upgrade bind-pkcs11-utilsUpgrade bind-debuginfoUpgrade bind-develUpgrade bind-sdb-chrootUpgrade bind-libs-lite | Jan 24, 2018 | Jan 17, 2018 |
| Suse | — | Upgrade libbind9-1600Upgrade libirs1601Upgrade libisc166-32bitUpgrade bind-utilsUpgrade python3-bindUpgrade libdns169Upgrade libisccfg160Upgrade libbind9-160Upgrade libisc1606Upgrade libns1604Upgrade python-bindUpgrade libdns1605Upgrade libisccfg1600Upgrade bind-libs-32bitUpgrade bind-docUpgrade liblwres160Upgrade libisccc160Upgrade libirs-develUpgrade bind-devel-32bitUpgrade libisccc1600Upgrade libisc166Upgrade bindUpgrade bind-develUpgrade bind-chrootenvUpgrade bind-libsUpgrade libirs160 | Feb 4, 2018 | Jan 17, 2018 |
| Ubuntu | — | Upgrade bind9 | Jan 18, 2018 | Jan 17, 2018 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub