ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
CVSS Details
- CVSS 3.1 Base Score: 8.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Aug 30, 2017 | Jun 5, 2012 |
| Apple Osx Bind | — | Upgrade macOS to the latest version | Sep 27, 2012 | Jun 5, 2012 |
| Apple Osx Note | — | Upgrade macOS to the latest versionApply OS X security update 2012-004 | Aug 28, 2015 | Jun 5, 2012 |
| Centos_linux | — | Upgrade bind97Upgrade bind-utilsUpgrade bind-develUpgrade bind-libsUpgrade bind97-libsUpgrade bindUpgrade bind97-develUpgrade bind97-utilsUpgrade bind97-chrootUpgrade bind-libbind-develUpgrade bind-sdbUpgrade caching-nameserverUpgrade bind-chroot | Dec 1, 2016 | Jun 5, 2012 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Jun 5, 2012 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jun 11, 2012 | Jun 4, 2012 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 26, 2014 |
| Freebsd | — | Upgrade bind96Upgrade bind99Upgrade bind97Upgrade bind98Upgrade FreeBSD | Dec 10, 2025 | Jun 27, 2012 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Jun 5, 2012 |
| Hpux | — | Update BindUpgrade.BIND-UPGRADE to the latest versionUpdate BindUpgrade.BIND2-UPGRADE to the latest versionUpdate NameService.BIND-RUN to the latest versionUpdate NameService.BIND-AUX to the latest version | Aug 11, 2017 | Jun 5, 2012 |
| Ibm Aix | — | Apply the fix or workaround for bind9_advisory4 | Nov 30, 2017 | Jun 5, 2012 |
| Oracle Solaris | — | Upgrade service/network/dns/bind to version 9.6.3.7.1-0.175.0.9.0.4.0 on Solaris 11.0Upgrade network/dns/bind to version 9.6.3.7.1-0.175.0.9.0.4.0 on Solaris 11.0 | May 29, 2017 | Jun 5, 2012 |
| Oracle_linux | — | Upgrade bind97Upgrade bind97-utilsUpgrade bind97-chrootUpgrade bind97-libsUpgrade bind97-devel | Oct 16, 2024 | Jun 5, 2012 |
| Redhat_linux | — | — | Jul 9, 2025 | Jun 4, 2012 |
| Suse | — | Upgrade bind-chrootenvUpgrade bind-lwresd-debuginfoUpgrade bind-develUpgrade bind-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-libs-32bitUpgrade bind-libsUpgrade bind-lwresdUpgrade bind-libs-64bitUpgrade bindUpgrade bind-devel-32bitUpgrade bind-debugsourceUpgrade bind-libs-debuginfo-32bitUpgrade bind-docUpgrade sle-sdk-releaseUpgrade bind-utils-debuginfo | Feb 17, 2015 | Jun 5, 2012 |
| Ubuntu | — | Upgrade libdns64Upgrade libdns36Upgrade libdns69Upgrade libdns81 | Nov 8, 2024 | Jun 5, 2012 |
| Vmsa 2012 0016 | — | Upgrade VMware ESX 4.1 to build number 874690 | Nov 22, 2012 | Jun 5, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub