The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade caching-nameserverUpgrade bind97-develUpgrade bind97-libsUpgrade bind97Upgrade bind-libsUpgrade bind97-utilsUpgrade bind-sdbUpgrade bind97-chrootUpgrade bind-utilsUpgrade bind-develUpgrade bind-chrootUpgrade bindUpgrade bind-libbind-devel | Dec 1, 2016 | Feb 8, 2012 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Feb 8, 2012 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 23, 2012 | Feb 7, 2012 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 29, 2014 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Feb 8, 2012 |
| Hpux | — | Update BindUpgrade.BIND2-UPGRADE to the latest versionUpdate NameService.BIND-AUX to the latest versionUpdate NameService.BIND-RUN to the latest versionApply patch PHNE_43369 from HPUpdate BINDv920.INET-SVCS-BIND to the latest versionUpdate BindUpgrade.BIND-UPGRADE to the latest version | Aug 11, 2017 | Feb 8, 2012 |
| Oracle_linux | — | Upgrade bind97-chrootUpgrade bind97Upgrade bind97-utilsUpgrade bind97-develUpgrade bind97-libs | Oct 16, 2024 | Feb 8, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 7, 2012 |
| Suse | — | Upgrade bind-debugsourceUpgrade bind-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-libs-debuginfo-x86Upgrade bind-lwresd-debuginfoUpgrade bind-docUpgrade bindUpgrade bind-libs-32bitUpgrade bind-lwresdUpgrade bind-libs-debuginfo-x86-debuginfoUpgrade bind-libsUpgrade bind-libs-x86Upgrade bind-chrootenvUpgrade bind-libs-debuginfo-32bitUpgrade bind-utilsUpgrade bind-develUpgrade bind-libs-debuginfo | Dec 12, 2013 | Feb 8, 2012 |
| Ubuntu | — | Upgrade libdns69Upgrade libdns36Upgrade libdns64Upgrade libdns81 | Nov 8, 2024 | Feb 8, 2012 |
| Vmsa 2012 0016 | — | Upgrade VMware ESX 4.1 to build number 874690 | Nov 22, 2012 | Feb 8, 2012 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub