The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to cause a denial of service (infinite loop) via a query for an RRSIG record whose answer is not in the cache, which causes BIND to repeatedly send RRSIG queries to the authoritative servers.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Jul 28, 2010 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Oct 5, 2011 | Jul 15, 2010 |
| Suse | — | Upgrade bind-utilsUpgrade bind-libs-32bitUpgrade bind-docUpgrade bindUpgrade bind-libsUpgrade bind-chrootenvUpgrade bind-devel | Feb 17, 2015 | Jul 28, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub