In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the assertion failure, causing the server to exit.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Aug 22, 2024 | Aug 21, 2020 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Aug 21, 2020 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Sep 8, 2020 | Aug 21, 2020 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Aug 31, 2020 | Aug 21, 2020 |
| Oracle Solaris | — | Upgrade service/network/dns/bind to version 9.11.22.0.0-11.4.26.0.1.75.1 on Solaris 11.4Upgrade network/dns/bind to version 9.11.22.0.0-11.4.26.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | Aug 21, 2020 |
| Suse | — | Upgrade libuv1Upgrade bindUpgrade libisccc1600Upgrade libbind9-1600-32bitUpgrade libdns1605Upgrade libirs1601Upgrade libns1604Upgrade libdns1605-32bitUpgrade libisc1606-32bitUpgrade libisc1606Upgrade libuv-develUpgrade libbind9-1600Upgrade libisccfg1600Upgrade bind-docUpgrade libuv1-32bitUpgrade libns1604-32bitUpgrade libirs-develUpgrade libirs1601-32bitUpgrade libisccc1600-32bitUpgrade bind-chrootenvUpgrade sysuser-toolsUpgrade bind-utilsUpgrade python3-bindUpgrade bind-develUpgrade libisccfg1600-32bitUpgrade sysuser-shadowUpgrade bind-devel-32bit | Oct 14, 2020 | Aug 21, 2020 |
| Ubuntu | — | Upgrade bind9 | Aug 22, 2020 | Aug 21, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub