A failure to free memory can occur when processing messages having a specific combination of EDNS options. Versions affected are: BIND 9.10.7 -> 9.10.8-P1, 9.11.3 -> 9.11.5-P1, 9.12.0 -> 9.12.3-P1, and versions 9.10.7-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -> 9.13.6 of the 9.13 development branch are also affected.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Oct 9, 2019 | Oct 9, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 9, 2019 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Oct 9, 2019 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 27, 2019 | Feb 27, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 22, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bind-export-libsUpgrade python3-bindUpgrade bind-licenseUpgrade bind-export-develUpgrade bind-libsUpgrade bind-chrootUpgrade bind-libs-liteUpgrade bind-pkcs11-libsUpgrade bind-pkcs11Upgrade bind-utilsUpgrade bind-pkcs11-utilsUpgrade bind | Nov 28, 2019 | Oct 9, 2019 |
| Oracle Solaris | — | Upgrade service/network/dns/bind to version 9.11.6.0.0-11.4.8.0.1.5.0 on Solaris 11.4Upgrade network/dns/bind to version 9.11.6.0.0-11.4.8.0.1.5.0 on Solaris 11.4 | Apr 17, 2019 | Apr 17, 2019 |
| Suse | — | Upgrade bind-utilsUpgrade libns1604Upgrade python3-bindUpgrade libbind9-1600Upgrade libdns1605Upgrade libisccfg1600Upgrade libisccc1600Upgrade libirs1601Upgrade bind-develUpgrade bind-chrootenvUpgrade libirs-develUpgrade bind-docUpgrade bindUpgrade libisc1606 | Feb 4, 2022 | Feb 22, 2019 |
| Ubuntu | — | Upgrade bind9 | Mar 1, 2019 | Feb 22, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub