named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via the standard DNS query mechanism.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Dec 6, 2010 |
| Dns Bind | — | Upgrade ISC BIND to latest versionallow-query acl in each zone statement | Oct 5, 2011 | Dec 1, 2010 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Dec 6, 2010 |
| Suse | — | Upgrade libirs160Upgrade bind-modules-mysqlUpgrade bind-libsUpgrade bind-modules-sqlite3Upgrade libisc166Upgrade libirs-develUpgrade libisccc160Upgrade libisccfg160Upgrade bind-chrootenvUpgrade bind-modules-genericUpgrade python3-bindUpgrade libbind9-160Upgrade bind-develUpgrade libdns169Upgrade libisc166-32bitUpgrade bind-docUpgrade liblwres160Upgrade python-bindUpgrade bindUpgrade bind-modules-ldapUpgrade bind-utilsUpgrade bind-libs-32bitUpgrade bind-modules-perl | Aug 9, 2024 | Jul 9, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub