Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2011-006 | Aug 28, 2015 | May 31, 2011 |
| Apple Osx Bind | — | Upgrade macOS to the latest version | Dec 16, 2011 | May 31, 2011 |
| Centos_linux | — | Upgrade bind97-utilsUpgrade bind97-chrootUpgrade bind97-develUpgrade bind97Upgrade bind97-libs | Dec 1, 2016 | May 31, 2011 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | May 31, 2011 |
| Dns Bind | — | Upgrade ISC BIND to latest versionRestrict access to the DNS caching resolver | Oct 5, 2011 | May 26, 2011 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 11, 2013 |
| Freebsd | — | Upgrade bind9-sdb-ldapUpgrade bind98Upgrade bind9-sdb-postgresqlUpgrade bind96Upgrade FreeBSDUpgrade bind97 | Dec 10, 2025 | Jun 4, 2011 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | May 31, 2011 |
| Hpux | — | Update NameService.BIND-RUN to the latest versionUpdate NameService.BIND-AUX to the latest version | Aug 11, 2017 | May 31, 2011 |
| Oracle_linux | — | Upgrade bind97-chrootUpgrade bind-utilsUpgrade bind97-utilsUpgrade bind-chrootUpgrade bind97-libsUpgrade bind97-develUpgrade bind97Upgrade bind-develUpgrade bind-sdbUpgrade bindUpgrade bind-libs | Oct 16, 2024 | May 31, 2011 |
| Suse | — | Upgrade bind-modules-sqlite3Upgrade bind-libsUpgrade liblwres160Upgrade bind-develUpgrade bind-devel-32bitUpgrade bind-utilsUpgrade libisccc160Upgrade bind-chrootenvUpgrade python3-bindUpgrade bind-libs-x86Upgrade libbind9-160Upgrade bind-modules-mysqlUpgrade bind-modules-perlUpgrade bind-modules-ldapUpgrade bind-libs-32bitUpgrade libirs-develUpgrade libirs160Upgrade libisc166-32bitUpgrade libdns169Upgrade python-bindUpgrade libisc166Upgrade bind-modules-genericUpgrade bindUpgrade libisccfg160Upgrade bind-doc | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libdns66Upgrade libdns69Upgrade libdns36Upgrade libdns64 | Nov 8, 2024 | May 31, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub