"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Affects BIND 9.7.0->9.8.8, 9.9.0->9.9.13, 9.10.0->9.10.8, 9.11.0->9.11.4, 9.12.0->9.12.2, 9.13.0->9.13.2.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Jan 16, 2019 | Jan 16, 2019 |
| Amazon Linux Ami 2 | — | Upgrade bind-debuginfoUpgrade bind-sdbUpgrade bindUpgrade bind-libsUpgrade bind-libs-liteUpgrade bind-chrootUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11-libsUpgrade bind-lite-develUpgrade bind-utilsUpgrade bind-sdb-chrootUpgrade bind-pkcs11-develUpgrade bind-develUpgrade bind-pkcs11 | Apr 27, 2020 | Jan 16, 2019 |
| Amazon_linux | — | Upgrade bind | Sep 20, 2018 | Aug 27, 2018 |
| Centos_linux | — | Upgrade bind-sdbUpgrade bindUpgrade bind-libsUpgrade bind-utilsUpgrade bind-lite-develUpgrade bind-chrootUpgrade bind-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11Upgrade bind-licenseUpgrade bind-develUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-develUpgrade bind-libs-liteUpgrade bind-sdb-chroot | Aug 30, 2018 | Aug 27, 2018 |
| Debian | — | Upgrade bind9 | Feb 19, 2019 | Jan 16, 2019 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Aug 10, 2018 | Aug 10, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 27, 2018 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Mar 14, 2019 | Jan 16, 2019 |
| Hpux | — | Update NameService to the latest version | Sep 16, 2019 | Jan 16, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bind-pkcs11Upgrade bind-chrootUpgrade bind-utilsUpgrade bind-pkcs11-libsUpgrade bind-libsUpgrade bindUpgrade bind-pkcs11-utilsUpgrade bind-licenseUpgrade bind-libs-lite | Sep 27, 2018 | Aug 8, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade bind-libsUpgrade bind-pkcs11-libsUpgrade bind-licenseUpgrade bind-pkcs11Upgrade bind-libs-liteUpgrade bind-utilsUpgrade bind-pkcs11-utilsUpgrade bind-chrootUpgrade bind | Sep 27, 2018 | Aug 8, 2018 |
| Oracle Solaris | — | Upgrade service/network/dns/bind to version 9.10.8.1.0-11.4.3.0.1.1.0 on Solaris 11.4Upgrade network/dns/bind to version 9.10.8.1.0-11.4.3.0.1.1.0 on Solaris 11.4 | Nov 19, 2018 | Nov 19, 2018 |
| Oracle_linux | — | Upgrade bind-lite-develUpgrade bind-pkcs11Upgrade bind-utilsUpgrade bind-chrootUpgrade bind-sdb-chrootUpgrade bind-pkcs11-libsUpgrade bind-sdbUpgrade bind-licenseUpgrade bind-pkcs11-develUpgrade bind-pkcs11-utilsUpgrade bindUpgrade bind-develUpgrade bind-libsUpgrade bind-libs-lite | Aug 28, 2018 | Aug 8, 2018 |
| Redhat_linux | — | Upgrade bind-licenseUpgrade bind-debuginfoUpgrade bind-sdbUpgrade bindUpgrade bind-lite-develUpgrade bind-develUpgrade bind-utilsUpgrade bind-libs-liteUpgrade bind-libsNo solution existsUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11-develUpgrade bind-sdb-chrootUpgrade bind-pkcs11Upgrade bind-chrootUpgrade bind-pkcs11-libs | Aug 28, 2018 | Aug 27, 2018 |
| Suse | — | Upgrade bind-develUpgrade libbind9-160-32bitUpgrade libirs1601Upgrade python3-bindUpgrade libbind9-160Upgrade libisccfg1600Upgrade libns1604Upgrade libisc166-32bitUpgrade libisccc1600Upgrade libisccfg160Upgrade libisccfg160-32bitUpgrade libdns1605Upgrade liblwres160Upgrade bind-libsUpgrade bind-utilsUpgrade libisccc160Upgrade libisc1606Upgrade liblwres160-32bitUpgrade libirs160Upgrade libbind9-1600Upgrade bind-docUpgrade libdns169-32bitUpgrade bind-libs-32bitUpgrade libirs-develUpgrade libisccc160-32bitUpgrade libirs160-32bitUpgrade bind-devel-32bitUpgrade bind-chrootenvUpgrade bind-lwresdUpgrade bindUpgrade python-bindUpgrade libdns169Upgrade libisc166 | Jun 3, 2019 | Aug 27, 2018 |
| Ubuntu | — | Upgrade bind9 | Oct 2, 2018 | Aug 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub