The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka "DNS Insufficient Socket Entropy Vulnerability" or "the Kaminsky bug."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Bind | — | Apply OS X security update 2008-005 | Dec 16, 2011 | Jul 8, 2008 |
| Apple Osx Libresolv | — | Apply OS X security update 2008-006Upgrade macOS to the latest version | Dec 16, 2011 | Jul 8, 2008 |
| Apple Osx Mdnsresponder | — | Apply OS X security update 2008-006Upgrade macOS to the latest version | Dec 16, 2011 | Jul 8, 2008 |
| Debian | — | Upgrade bind9Upgrade dnsmasqUpgrade adnsUpgrade refpolicyUpgrade dnspythonUpgrade udnsUpgrade libnet-dns-perl | Jul 30, 2024 | Jul 8, 2008 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 19, 2013 |
| Freebsd | — | Upgrade rubyUpgrade FreeBSDUpgrade ruby+pthreadsUpgrade ruby+onigurumaUpgrade ruby+pthreads+oniguruma | Dec 10, 2025 | Aug 16, 2008 |
| Gentoo Linux | — | Upgrade dev-lang/ruby.Upgrade net-dns/bind.Upgrade app-emulation/vmware-player.Upgrade net-dns/dnsmasq.Upgrade app-emulation/vmware-workstation.Upgrade net-dns/pdnsd.Upgrade app-emulation/vmware-server. | Oct 30, 2017 | Jul 8, 2008 |
| Hpux | — | Update BINDv920.INETSVCS-BIND to the latest versionUpdate InternetSrvcs.INETSVCS-RUN to the latest versionUpdate NameService.BIND-AUX to the latest versionUpdate BindUpgrade.BIND-UPGRADE to the latest versionApply patch PHNE_37865 from HPUpdate NameService.BIND-RUN to the latest versionUpdate BindUpgrade.BIND2-UPGRADE to the latest version | Aug 11, 2017 | Jul 8, 2008 |
| Oracle_linux | — | Upgrade bind-libbind-develUpgrade bind-chrootUpgrade bindUpgrade selinux-policy-targetedUpgrade bind-develUpgrade selinux-policy-mlsUpgrade bind-utilsUpgrade bind-libsUpgrade bind-sdbUpgrade caching-nameserverUpgrade dnsmasqUpgrade selinux-policyUpgrade selinux-policy-develUpgrade selinux-policy-strict | Oct 16, 2024 | Jul 8, 2008 |
| Suse | — | Upgrade libadns-develUpgrade libadns1 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libdns21Upgrade libdns35Upgrade libdns32Upgrade dnsmasq-baseUpgrade libdns22 | Nov 8, 2024 | Jul 8, 2008 |
| Vmsa 2008 0014 | — | Apply ESX350-200808409-SG. | Nov 19, 2010 | Jul 8, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub