query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Bind | — | Upgrade macOS to the latest version | Sep 27, 2012 | Nov 29, 2011 |
| Apple Osx Note | — | Apply OS X security update 2012-004Upgrade macOS to the latest version | Aug 28, 2015 | Nov 29, 2011 |
| Centos_linux | — | Upgrade bind97-libsUpgrade bind97-chrootUpgrade bind97-utilsUpgrade caching-nameserverUpgrade bind97-develUpgrade bind-utilsUpgrade bind-libbind-develUpgrade bind-sdbUpgrade bind-libsUpgrade bind-chrootUpgrade bind97Upgrade bind-develUpgrade bind | Dec 1, 2016 | Nov 29, 2011 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Nov 29, 2011 |
| Dns Bind | — | Apply patch to mitigate BIND 9 resolver crashUpgrade ISC BIND to latest version | Nov 28, 2011 | Nov 16, 2011 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 10, 2013 |
| Freebsd | — | Upgrade bind96Upgrade FreeBSDUpgrade bind97Upgrade bind98 | Dec 10, 2025 | Nov 16, 2011 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Nov 29, 2011 |
| Hpux | — | Update NameService.BIND-AUX to the latest versionUpdate BINDv920.INETSVCS-BIND to the latest versionUpdate NameService.BIND-RUN to the latest versionUpdate BindUpgrade.BIND2-UPGRADE to the latest versionUpdate BindUpgrade.BIND-UPGRADE to the latest versionApply patch PHNE_42727 from HP | Aug 11, 2017 | Nov 29, 2011 |
| Ibm Aix | — | Apply the fix or workaround for bind9_advisory3 | Nov 30, 2017 | Nov 29, 2011 |
| Oracle Solaris | — | Upgrade service/network/dns/bind to version 9.6.3.5.1-0.175.0.2.0.3.0 on Solaris 11.0Upgrade network/dns/bind to version 9.6.3.5.1-0.175.0.2.0.3.0 on Solaris 11.0 | May 29, 2017 | Nov 29, 2011 |
| Oracle_linux | — | Upgrade bind-sdbUpgrade bind97-chrootUpgrade bind-chrootUpgrade bind-libbind-develUpgrade bind-utilsUpgrade bind97Upgrade bind-develUpgrade bindUpgrade caching-nameserverUpgrade bind97-utilsUpgrade bind-libsUpgrade bind97-libsUpgrade bind97-devel | Oct 16, 2024 | Nov 29, 2011 |
| Suse | — | Upgrade bind-chrootenvUpgrade python3-bindUpgrade bind-develUpgrade bindUpgrade liblwres160Upgrade libisc166Upgrade libbind9-160Upgrade bind-modules-mysqlUpgrade libirs-develUpgrade bind-modules-sqlite3Upgrade bind-libsUpgrade bind-devel-32bitUpgrade libirs160Upgrade libisccc160Upgrade bind-modules-genericUpgrade bind-modules-perlUpgrade libisccfg160Upgrade bind-modules-ldapUpgrade libdns169Upgrade bind-docUpgrade bind-libs-x86Upgrade python-bindUpgrade libisc166-32bitUpgrade bind-utilsUpgrade bind-libs-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libdns64Upgrade libdns66Upgrade libdns69Upgrade libdns36 | Nov 8, 2024 | Nov 29, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub