The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Bind | — | Apply OS X security update 2009-004 | Dec 16, 2011 | Jul 29, 2009 |
| Centos_linux | — | Upgrade bind-chrootUpgrade bind-libsUpgrade bind-develUpgrade bind-utilsUpgrade bindUpgrade caching-nameserverUpgrade bind-sdbUpgrade bind-libbind-devel | Dec 1, 2016 | Jul 29, 2009 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Jul 29, 2009 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 28, 2013 |
| Freebsd | — | Upgrade bind9-sdb-postgresqlUpgrade FreeBSDUpgrade bind9Upgrade bind9-sdb-ldap | Dec 10, 2025 | Aug 1, 2009 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Jul 29, 2009 |
| Hpux | — | Update NameService.BIND-AUX to the latest versionUpdate BindUpgrade.BIND2-UPGRADE to the latest versionUpdate NameService.BIND-RUN to the latest versionUpdate BindUpgrade.BIND-UPGRADE to the latest versionApply patch PHNE_40339 from HPUpdate BINDv920.INETSVCS-BIND to the latest version | Aug 11, 2017 | Jul 29, 2009 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory | Nov 30, 2017 | Jul 29, 2009 |
| Oracle_linux | — | Upgrade bind-libbind-develUpgrade bind-develUpgrade bind-sdbUpgrade bind-libsUpgrade bindUpgrade bind-utilsUpgrade caching-nameserverUpgrade bind-chroot | Oct 16, 2024 | Jul 29, 2009 |
| Suse | — | Upgrade bind-develUpgrade python-bindUpgrade bind-libs-32bitUpgrade bind-chrootenvUpgrade libirs-develUpgrade bind-modules-perlUpgrade bind-modules-genericUpgrade python3-bindUpgrade bind-devel-32bitUpgrade libirs160Upgrade bind-modules-ldapUpgrade bindUpgrade libisccc160Upgrade bind-utilsUpgrade bind-libs-x86Upgrade bind-modules-mysqlUpgrade libisc166Upgrade bind-modules-sqlite3Upgrade libdns169Upgrade bind-libsUpgrade libbind9-160Upgrade liblwres160Upgrade libisc166-32bitUpgrade bind-docUpgrade libisccfg160 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade bind9 | Nov 8, 2024 | Jul 29, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Bind | — | Upgrade VMware ESX 3.5 to build number 226117Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Jul 29, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub