The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade bindUpgrade bind-chrootUpgrade bind97-chrootUpgrade bind-utilsUpgrade bind-sdbUpgrade bind97-utilsUpgrade bind-develUpgrade bind-libbind-develUpgrade bind97Upgrade bind97-develUpgrade caching-nameserverUpgrade bind-libsUpgrade bind97-libs | Dec 1, 2016 | Feb 8, 2012 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Feb 8, 2012 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 23, 2012 | Feb 7, 2012 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 29, 2014 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Feb 8, 2012 |
| Hpux | — | Update BindUpgrade.BIND-UPGRADE to the latest versionApply patch PHNE_43369 from HPUpdate BINDv920.INET-SVCS-BIND to the latest versionUpdate NameService.BIND-AUX to the latest versionUpdate BindUpgrade.BIND2-UPGRADE to the latest versionUpdate NameService.BIND-RUN to the latest version | Aug 11, 2017 | Feb 8, 2012 |
| Oracle_linux | — | Upgrade bind97-chrootUpgrade bind97Upgrade bind97-develUpgrade bind97-utilsUpgrade bind97-libs | Oct 16, 2024 | Feb 8, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 7, 2012 |
| Suse | — | Upgrade bind-develUpgrade bind-libs-debuginfo-32bitUpgrade bind-libs-debuginfo-x86-debuginfoUpgrade bind-libsUpgrade bind-libs-x86Upgrade bind-utilsUpgrade bind-libs-debuginfoUpgrade bind-lwresdUpgrade bind-chrootenvUpgrade bind-debuginfoUpgrade bind-lwresd-debuginfoUpgrade bind-debugsourceUpgrade bind-docUpgrade bind-libs-32bitUpgrade bindUpgrade bind-utils-debuginfoUpgrade bind-libs-debuginfo-x86 | Dec 12, 2013 | Feb 8, 2012 |
| Ubuntu | — | Upgrade libdns69Upgrade libdns36Upgrade libdns64Upgrade libdns81 | Nov 8, 2024 | Feb 8, 2012 |
| Vmsa 2012 0016 | — | Upgrade VMware ESX 4.1 to build number 874690 | Nov 22, 2012 | Feb 8, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub