The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows remote attackers to make recursive queries and query the cache.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Jul 24, 2007 |
| Dns Bind | — | Upgrade ISC BIND to latest versionExplicitly set allow-query-cache and allow-recursion acl's | Oct 5, 2011 | Jul 24, 2007 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Jul 24, 2007 |
| Suse | — | Upgrade bind-modules-perlUpgrade bind-modules-sqlite3Upgrade bind-modules-mysqlUpgrade bind-devel-32bitUpgrade bind-develUpgrade bind-libs-x86Upgrade bind-utilsUpgrade bind-libsUpgrade bind-chrootenvUpgrade bind-docUpgrade bindUpgrade bind-modules-genericUpgrade bind-modules-ldapUpgrade bind-libs-32bit | Aug 9, 2024 | Jun 28, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub