The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Bind | — | Apply OS X security update 2009-004 | Dec 16, 2011 | Jul 29, 2009 |
| Centos_linux | — | Upgrade bind-chrootUpgrade bind-libsUpgrade bind-develUpgrade caching-nameserverUpgrade bind-sdbUpgrade bindUpgrade bind-libbind-develUpgrade bind-utils | Dec 1, 2016 | Jul 29, 2009 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Jul 29, 2009 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 28, 2013 |
| Freebsd | — | Upgrade bind9-sdb-postgresqlUpgrade FreeBSDUpgrade bind9-sdb-ldapUpgrade bind9 | Dec 10, 2025 | Aug 1, 2009 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Jul 29, 2009 |
| Hpux | — | Update NameService.BIND-RUN to the latest versionUpdate NameService.BIND-AUX to the latest versionUpdate BindUpgrade.BIND2-UPGRADE to the latest versionUpdate BindUpgrade.BIND-UPGRADE to the latest versionUpdate BINDv920.INETSVCS-BIND to the latest versionApply patch PHNE_40339 from HP | Aug 11, 2017 | Jul 29, 2009 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory | Nov 30, 2017 | Jul 29, 2009 |
| Oracle_linux | — | Upgrade bind-sdbUpgrade bind-libsUpgrade bindUpgrade bind-develUpgrade bind-libbind-develUpgrade caching-nameserverUpgrade bind-utilsUpgrade bind-chroot | Oct 16, 2024 | Jul 29, 2009 |
| Suse | — | Upgrade bind-chrootenvUpgrade libisccc160Upgrade bind-devel-32bitUpgrade bind-modules-ldapUpgrade bind-modules-genericUpgrade bind-modules-perlUpgrade python-bindUpgrade bind-utilsUpgrade libirs160Upgrade libirs-develUpgrade bindUpgrade bind-libs-32bitUpgrade python3-bindUpgrade bind-develUpgrade liblwres160Upgrade libisc166Upgrade bind-libs-x86Upgrade bind-modules-sqlite3Upgrade bind-libsUpgrade libisccfg160Upgrade libbind9-160Upgrade bind-docUpgrade libisc166-32bitUpgrade bind-modules-mysqlUpgrade libdns169 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade bind9 | Nov 8, 2024 | Jul 29, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Bind | — | Upgrade VMware ESX 4.0 to build number 208167Upgrade VMware ESX 3.5 to build number 226117 | Sep 2, 2010 | Jul 29, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub