The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Bind | — | Apply OS X security update 2009-004 | Dec 16, 2011 | Jul 29, 2009 |
| Centos_linux | — | Upgrade bindUpgrade bind-utilsUpgrade bind-sdbUpgrade caching-nameserverUpgrade bind-libbind-develUpgrade bind-libsUpgrade bind-develUpgrade bind-chroot | Dec 1, 2016 | Jul 29, 2009 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Jul 29, 2009 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 28, 2013 |
| Freebsd | — | Upgrade bind9-sdb-postgresqlUpgrade FreeBSDUpgrade bind9Upgrade bind9-sdb-ldap | Dec 10, 2025 | Aug 1, 2009 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Jul 29, 2009 |
| Hpux | — | Update NameService.BIND-RUN to the latest versionUpdate NameService.BIND-AUX to the latest versionUpdate BindUpgrade.BIND2-UPGRADE to the latest versionApply patch PHNE_40339 from HPUpdate BindUpgrade.BIND-UPGRADE to the latest versionUpdate BINDv920.INETSVCS-BIND to the latest version | Aug 11, 2017 | Jul 29, 2009 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory | Nov 30, 2017 | Jul 29, 2009 |
| Oracle_linux | — | Upgrade bind-chrootUpgrade caching-nameserverUpgrade bind-utilsUpgrade bind-libsUpgrade bind-sdbUpgrade bindUpgrade bind-libbind-develUpgrade bind-devel | Oct 16, 2024 | Jul 29, 2009 |
| Suse | — | Upgrade bind-libs-x86Upgrade liblwres160Upgrade bind-libsUpgrade libisc166Upgrade bind-docUpgrade bind-modules-mysqlUpgrade libbind9-160Upgrade libisc166-32bitUpgrade libisccfg160Upgrade libdns169Upgrade bind-modules-sqlite3Upgrade bind-develUpgrade bindUpgrade bind-chrootenvUpgrade bind-utilsUpgrade bind-modules-ldapUpgrade bind-modules-genericUpgrade bind-libs-32bitUpgrade libirs-develUpgrade bind-devel-32bitUpgrade bind-modules-perlUpgrade libisccc160Upgrade python3-bindUpgrade libirs160Upgrade python-bind | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade bind9 | Nov 8, 2024 | Jul 29, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Bind | — | Upgrade VMware ESX 4.0 to build number 208167Upgrade VMware ESX 3.5 to build number 226117 | Sep 2, 2010 | Jul 29, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub