A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Nov 8, 2019 | Oct 9, 2019 |
| Centos_linux | — | Upgrade bind-libs-liteUpgrade bind-pkcs11Upgrade bind-debuginfoUpgrade bind-sdb-debuginfoUpgrade bind-chrootUpgrade bind-sdb-chrootUpgrade python3-bindUpgrade bind-lite-develUpgrade bind-export-libs-debuginfoUpgrade bind-libsUpgrade bind-libs-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-develUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-debuginfoUpgrade bind-licenseUpgrade bind-pkcs11-develUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bindUpgrade bind-sdbUpgrade bind-utils-debuginfoUpgrade bind-export-libsUpgrade bind-export-develUpgrade bind-utilsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-debugsource | Aug 28, 2019 | Jul 9, 2019 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Oct 9, 2019 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jun 27, 2019 | Jun 27, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 23, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bind-libsUpgrade bindUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11Upgrade bind-export-libsUpgrade bind-licenseUpgrade bind-export-develUpgrade bind-chrootUpgrade bind-pkcs11-libsUpgrade bind-utilsUpgrade python3-bindUpgrade bind-libs-lite | Nov 19, 2019 | Oct 9, 2019 |
| Oracle Solaris | — | Upgrade service/network/dns/bind to version 9.11.8.0.0-11.4.12.0.1.2.0 on Solaris 11.4Upgrade network/dns/bind to version 9.11.8.0.0-11.4.12.0.1.2.0 on Solaris 11.4 | Aug 21, 2019 | Aug 21, 2019 |
| Oracle_linux | — | Upgrade bind-export-libsUpgrade bind-licenseUpgrade bind-pkcs11-develUpgrade bind-develUpgrade bindUpgrade bind-export-develUpgrade bind-libs-liteUpgrade bind-pkcs11-utilsUpgrade bind-sdb-chrootUpgrade bind-libsUpgrade bind-utilsUpgrade python3-bindUpgrade bind-lite-develUpgrade bind-pkcs11-libsUpgrade bind-sdbUpgrade bind-chrootUpgrade bind-pkcs11 | Jul 22, 2024 | Jun 19, 2019 |
| Redhat_linux | — | Upgrade bind-utilsUpgrade bind-pkcs11Upgrade bind-libs-liteUpgrade bind-libs-lite-debuginfoUpgrade bind-export-libsUpgrade bind-lite-develUpgrade bind-debuginfoUpgrade bind-chrootUpgrade bind-develUpgrade bind-pkcs11-utilsUpgrade bind-export-libs-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bindUpgrade bind-debugsourceUpgrade bind-libsUpgrade bind-sdbUpgrade bind-utils-debuginfoUpgrade bind-sdb-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-sdb-chrootUpgrade bind-licenseUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-libs-debuginfoUpgrade python3-bindUpgrade bind-pkcs11-develUpgrade bind-pkcs11-libsUpgrade bind-export-devel | Jul 11, 2019 | Jul 9, 2019 |
| Suse | — | Upgrade libisccfg160Upgrade libisc1606Upgrade bindUpgrade libbind9-1600Upgrade liblwres160Upgrade libisccc160Upgrade libbind9-160Upgrade libisccc160-32bitUpgrade bind-lwresdUpgrade libisc166-32bitUpgrade libns1604Upgrade libdns169-32bitUpgrade liblwres160-32bitUpgrade libdns169Upgrade libisccc1600Upgrade bind-docUpgrade bind-chrootenvUpgrade libirs160Upgrade libisccfg1600Upgrade libirs1601Upgrade python3-bindUpgrade libirs-develUpgrade libirs160-32bitUpgrade bind-develUpgrade bind-devel-32bitUpgrade libisccfg160-32bitUpgrade libbind9-160-32bitUpgrade libisc166Upgrade libdns1605Upgrade python-bindUpgrade bind-utils | Oct 2, 2019 | Jun 20, 2019 |
| Ubuntu | — | Upgrade bind9 | Jun 20, 2019 | Jun 20, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub