Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can cause BIND to exit with an assertion failure.
'Broken' in this context is anything that would cause the resolver to reject the query response, such as a mismatch between query and answer name. This issue affects BIND 9 versions 9.11.4-S1 through 9.11.37-S1 and 9.16.8-S1 through 9.16.36-S1.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bind-dnssec-utilsUpgrade bindUpgrade bind-debugsourceUpgrade bind-dlz-ldap-debuginfoUpgrade bind-utilsUpgrade bind-dnssec-docUpgrade bind-dlz-ldapUpgrade bind-dlz-sqlite3-debuginfoUpgrade bind-dlz-sqlite3Upgrade bind-chrootUpgrade bind-dlz-filesystemUpgrade bind-dlz-mysql-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-dlz-filesystem-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-licenseUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-utilsUpgrade python3-bindUpgrade bind-debuginfoUpgrade bind-pkcs11Upgrade bind-libs-debuginfoUpgrade bind-dlz-mysqlUpgrade bind-libsUpgrade bind-develUpgrade bind-pkcs11-develUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-debuginfo | Feb 17, 2025 | Jan 25, 2023 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Mar 7, 2023 | Jan 26, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub