ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
CVSS Details
- CVSS 3.1 Base Score: 8.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Aug 30, 2017 | Jun 5, 2012 |
| Apple Osx Bind | — | Upgrade macOS to the latest version | Sep 27, 2012 | Jun 5, 2012 |
| Apple Osx Note | — | Apply OS X security update 2012-004Upgrade macOS to the latest version | Aug 28, 2015 | Jun 5, 2012 |
| Centos_linux | — | Upgrade bind-utilsUpgrade bind-develUpgrade bind-libsUpgrade bind97Upgrade bind97-develUpgrade bind97-chrootUpgrade bind97-utilsUpgrade bindUpgrade bind97-libsUpgrade bind-libbind-develUpgrade bind-sdbUpgrade bind-chrootUpgrade caching-nameserver | Dec 1, 2016 | Jun 5, 2012 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Jun 5, 2012 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jun 11, 2012 | Jun 4, 2012 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 26, 2014 |
| Freebsd | — | Upgrade bind99Upgrade bind96Upgrade bind98Upgrade FreeBSDUpgrade bind97 | Dec 10, 2025 | Jun 27, 2012 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Jun 5, 2012 |
| Hpux | — | Update BindUpgrade.BIND-UPGRADE to the latest versionUpdate NameService.BIND-RUN to the latest versionUpdate NameService.BIND-AUX to the latest versionUpdate BindUpgrade.BIND2-UPGRADE to the latest version | Aug 11, 2017 | Jun 5, 2012 |
| Ibm Aix | — | Apply the fix or workaround for bind9_advisory4 | Nov 30, 2017 | Jun 5, 2012 |
| Oracle Solaris | — | Upgrade network/dns/bind to version 9.6.3.7.1-0.175.0.9.0.4.0 on Solaris 11.0Upgrade service/network/dns/bind to version 9.6.3.7.1-0.175.0.9.0.4.0 on Solaris 11.0 | May 29, 2017 | Jun 5, 2012 |
| Oracle_linux | — | Upgrade bind97-utilsUpgrade bind97-libsUpgrade bind97-chrootUpgrade bind97-develUpgrade bind97 | Oct 16, 2024 | Jun 5, 2012 |
| Redhat_linux | — | — | Jul 9, 2025 | Jun 4, 2012 |
| Suse | — | Upgrade bind-libs-32bitUpgrade bind-develUpgrade liblwres160Upgrade bind-modules-perlUpgrade libirs160Upgrade bind-libsUpgrade bind-modules-ldapUpgrade libdns169Upgrade libirs-develUpgrade bindUpgrade bind-modules-sqlite3Upgrade bind-devel-32bitUpgrade bind-docUpgrade bind-chrootenvUpgrade libisc166Upgrade libisc166-32bitUpgrade python-bindUpgrade bind-modules-mysqlUpgrade python3-bindUpgrade bind-modules-genericUpgrade libbind9-160Upgrade bind-libs-x86Upgrade bind-utilsUpgrade libisccc160Upgrade libisccfg160 | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade libdns36Upgrade libdns69Upgrade libdns81Upgrade libdns64 | Nov 8, 2024 | Jun 5, 2012 |
| Vmsa 2012 0016 | — | Upgrade VMware ESX 4.1 to build number 874690 | Nov 22, 2012 | Jun 5, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub