The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Aug 30, 2017 | Jan 13, 2014 |
| Centos_linux | — | Upgrade bind97-chrootUpgrade bind-sdbUpgrade bind-libsUpgrade bind-chrootUpgrade bind97Upgrade bindUpgrade bind-utilsUpgrade bind97-libsUpgrade bind-develUpgrade bind97-utilsUpgrade bind97-devel | Dec 1, 2016 | Jan 13, 2014 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Jan 14, 2014 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jan 15, 2014 | Jan 13, 2014 |
| Freebsd | — | Upgrade bind99-baseUpgrade bind96Upgrade bind98-baseUpgrade bind96-baseUpgrade FreeBSDUpgrade bind98Upgrade bind99 | Dec 10, 2025 | Jan 13, 2014 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Jan 13, 2014 |
| Hpux | — | Update NameService.BIND-AUX to the latest versionUpdate NameService.BIND-RUN to the latest version | Aug 11, 2017 | Jan 13, 2014 |
| Oracle Solaris | — | Upgrade network/dns/bind to version 9.6.3.10.2-0.175.1.16.0.3.0 on Solaris 11.1Upgrade service/network/dns/bind to version 9.6.3.10.2-0.175.1.16.0.3.0 on Solaris 11.1 | May 29, 2017 | Jan 13, 2014 |
| Oracle_linux | — | Upgrade bind97-libsUpgrade bind97Upgrade bind97-chrootUpgrade bind97-develUpgrade bind-libsUpgrade bind-develUpgrade bind-utilsUpgrade bind-chrootUpgrade bind-sdbUpgrade bindUpgrade bind97-utils | Oct 16, 2024 | Jan 14, 2014 |
| Suse | — | Upgrade bind-docUpgrade liblwres160Upgrade libdns169Upgrade bind-devel-32bitUpgrade python-bindUpgrade libirs-develUpgrade bindUpgrade bind-libs-32bitUpgrade libisccfg160Upgrade bind-libsUpgrade libbind9-160Upgrade libisc166Upgrade bind-chrootenvUpgrade bind-develUpgrade libirs160Upgrade libisc166-32bitUpgrade python3-bindUpgrade libisccc160Upgrade bind-utilsUpgrade bind-libs-x86 | Dec 18, 2015 | Jan 13, 2014 |
| Ubuntu | — | Upgrade bind9 | Nov 8, 2024 | Jan 14, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub