query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Bind | — | Upgrade macOS to the latest version | Sep 27, 2012 | Nov 29, 2011 |
| Apple Osx Note | — | Upgrade macOS to the latest versionApply OS X security update 2012-004 | Aug 28, 2015 | Nov 29, 2011 |
| Centos_linux | — | Upgrade bind-libbind-develUpgrade bindUpgrade bind-develUpgrade bind-libsUpgrade bind97Upgrade bind-sdbUpgrade bind-chrootUpgrade bind97-develUpgrade bind97-chrootUpgrade bind97-libsUpgrade bind-utilsUpgrade caching-nameserverUpgrade bind97-utils | Dec 1, 2016 | Nov 29, 2011 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Nov 29, 2011 |
| Dns Bind | — | Upgrade ISC BIND to latest versionApply patch to mitigate BIND 9 resolver crash | Nov 28, 2011 | Nov 16, 2011 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 10, 2013 |
| Freebsd | — | Upgrade bind98Upgrade bind97Upgrade FreeBSDUpgrade bind96 | Dec 10, 2025 | Nov 16, 2011 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Nov 29, 2011 |
| Hpux | — | Apply patch PHNE_42727 from HPUpdate BindUpgrade.BIND-UPGRADE to the latest versionUpdate BindUpgrade.BIND2-UPGRADE to the latest versionUpdate NameService.BIND-AUX to the latest versionUpdate NameService.BIND-RUN to the latest versionUpdate BINDv920.INETSVCS-BIND to the latest version | Aug 11, 2017 | Nov 29, 2011 |
| Ibm Aix | — | Apply the fix or workaround for bind9_advisory3 | Nov 30, 2017 | Nov 29, 2011 |
| Oracle Solaris | — | Upgrade service/network/dns/bind to version 9.6.3.5.1-0.175.0.2.0.3.0 on Solaris 11.0Upgrade network/dns/bind to version 9.6.3.5.1-0.175.0.2.0.3.0 on Solaris 11.0 | May 29, 2017 | Nov 29, 2011 |
| Oracle_linux | — | Upgrade bind-libsUpgrade bind97-develUpgrade bind97-libsUpgrade bind97Upgrade bind-libbind-develUpgrade caching-nameserverUpgrade bind97-utilsUpgrade bindUpgrade bind-sdbUpgrade bind-utilsUpgrade bind97-chrootUpgrade bind-develUpgrade bind-chroot | Oct 16, 2024 | Nov 29, 2011 |
| Suse | — | Upgrade bind-chrootenvUpgrade bind-devel-32bitUpgrade libbind9-160Upgrade libirs-develUpgrade bind-modules-mysqlUpgrade python3-bindUpgrade bind-libsUpgrade libisccc160Upgrade libirs160Upgrade bind-develUpgrade liblwres160Upgrade libisc166Upgrade bindUpgrade bind-modules-sqlite3Upgrade libisccfg160Upgrade bind-docUpgrade bind-libs-32bitUpgrade bind-utilsUpgrade bind-modules-genericUpgrade python-bindUpgrade libdns169Upgrade bind-modules-ldapUpgrade libisc166-32bitUpgrade bind-modules-perlUpgrade bind-libs-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libdns64Upgrade libdns66Upgrade libdns69Upgrade libdns36 | Nov 8, 2024 | Nov 29, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub