libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression, as demonstrated by a memory-exhaustion attack against a machine running a named process.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bindUpgrade dhcp | Aug 30, 2017 | Mar 28, 2013 |
| Apple Osx Apache | — | Apply OS X security update 2013-004Upgrade macOS to the latest version | Aug 28, 2015 | Mar 28, 2013 |
| Apple Osx Bind | — | Apply OS X security update 2013-004Upgrade macOS to the latest version | Sep 17, 2013 | Mar 28, 2013 |
| Centos_linux | — | Upgrade bindUpgrade bind97Upgrade bind-sdbUpgrade bind-libsUpgrade bind-develUpgrade bind97-chrootUpgrade bind-chrootUpgrade bind-utilsUpgrade bind97-develUpgrade bind97-libsUpgrade bind97-utils | Dec 1, 2016 | Mar 28, 2013 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Mar 28, 2013 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Apr 1, 2013 | Mar 26, 2013 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 26, 2014 |
| Freebsd | — | Upgrade bind99Upgrade FreeBSDUpgrade bind99-baseUpgrade bind98Upgrade bind98-base | Dec 10, 2025 | Apr 2, 2013 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Mar 28, 2013 |
| Hpux | — | Update 9.7.3 to the latest versionUpdate NameService.BIND-AUX to the latest versionUpdate NameService.BIND-RUN to the latest version | Aug 11, 2017 | Mar 28, 2013 |
| Oracle_linux | — | Upgrade bind97-chrootUpgrade bind97Upgrade bind97-libsUpgrade bind97-utilsUpgrade bind97-devel | Oct 16, 2024 | Mar 28, 2013 |
| Suse | — | Upgrade dhcp-clientUpgrade dhcp-develUpgrade dhcp-server-debuginfoUpgrade bind-libs-debuginfo-x86Upgrade bind-libs-32bitUpgrade bind-debugsourceUpgrade bind-utilsUpgrade sle-sdk-releaseUpgrade bindUpgrade bind-chrootenvUpgrade bind-lwresdUpgrade bind-libsUpgrade dhcp-docUpgrade bind-libs-debuginfo-32bitUpgrade bind-lwresd-debuginfoUpgrade bind-debuginfoUpgrade bind-develUpgrade dhcp-serverUpgrade dhcp-client-debuginfoUpgrade bind-libs-x86Upgrade dhcp-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-utils-debuginfoUpgrade dhcp-relay-debuginfoUpgrade dhcp-relayUpgrade dhcp-debugsourceUpgrade dhcpUpgrade bind-doc | Dec 12, 2013 | Mar 28, 2013 |
| Ubuntu | — | Upgrade libdns69Upgrade bind9Upgrade libdns81Upgrade libdns64 | Nov 8, 2024 | Mar 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub