db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a malformed class attribute.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3.12 Bind_advisory10 | — | — | Aug 5, 2016 | Dec 16, 2015 |
| Aix 6.1.9 Bind_advisory10 | — | — | Aug 5, 2016 | Dec 16, 2015 |
| Aix 7.1.3 Bind_advisory10 | — | — | Aug 5, 2016 | Dec 16, 2015 |
| Aix 7.1.4 Bind_advisory10 | — | — | Aug 5, 2016 | Dec 16, 2015 |
| Aix 7.2.0 Bind_advisory10 | — | — | Aug 5, 2016 | Dec 16, 2015 |
| Alpine Linux | — | Upgrade bind | Aug 30, 2017 | Dec 16, 2015 |
| Centos_linux | — | Upgrade bind-pkcs11-develUpgrade bind-libbind-develUpgrade bindUpgrade bind97-develUpgrade bind97-libsUpgrade bind-sdbUpgrade bind97-utilsUpgrade caching-nameserverUpgrade bind97-chrootUpgrade bind97Upgrade bind-pkcs11-utilsUpgrade bind-licenseUpgrade bind-develUpgrade bind-utilsUpgrade bind-libs-liteUpgrade bind-libsUpgrade bind-pkcs11Upgrade bind-chrootUpgrade bind-sdb-chrootUpgrade bind-pkcs11-libsUpgrade bind-lite-devel | Dec 1, 2016 | Dec 16, 2015 |
| Debian | — | Upgrade bind9 | Dec 18, 2015 | Dec 15, 2015 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jan 7, 2016 | Dec 16, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Dec 16, 2015 |
| Freebsd | — | Upgrade bind99Upgrade bind9-develUpgrade bind910Upgrade FreeBSD | Dec 10, 2025 | Dec 16, 2015 |
| Hpux | — | Update BindUpgrade.BIND-UPGRADE to the latest versionUpdate BindUpgrade.BIND2-UPGRADE to the latest versionUpdate NameService.BIND-RUN to the latest versionUpdate NameService.BIND-AUX to the latest version | Aug 11, 2017 | Dec 16, 2015 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory10 | Nov 30, 2017 | Dec 16, 2015 |
| Oracle Solaris | — | Upgrade network/dns/bind to version 9.6.3.11.4-0.175.3.4.0.3.0 on Solaris 11.3Upgrade service/network/dns/bind to version 9.6.3.11.4-0.175.3.4.0.3.0 on Solaris 11.3 | May 29, 2017 | Dec 16, 2015 |
| Oracle_linux | — | Upgrade bind97-develUpgrade bind-sdbUpgrade bindUpgrade bind-licenseUpgrade bind-libs-liteUpgrade bind97-utilsUpgrade bind-pkcs11-libsUpgrade bind97-chrootUpgrade bind-utilsUpgrade bind-pkcs11Upgrade bind-lite-develUpgrade bind-develUpgrade bind97-libsUpgrade bind-pkcs11-develUpgrade bind-chrootUpgrade bind-pkcs11-utilsUpgrade bind97Upgrade bind-libsUpgrade bind-sdb-chroot | Sep 28, 2016 | Dec 16, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 15, 2015 |
| Suse | — | Upgrade bind-utilsUpgrade bindUpgrade libisccfg1600Upgrade libdns1605Upgrade python-bindUpgrade libirs160Upgrade libdns169Upgrade libisccc1600Upgrade bind-docUpgrade bind-devel-32bitUpgrade libisc166-32bitUpgrade libirs1601Upgrade libbind9-160Upgrade bind-chrootenvUpgrade libns1604Upgrade libisc1606Upgrade bind-develUpgrade bind-libsUpgrade libirs-develUpgrade libisc166Upgrade libbind9-1600Upgrade liblwres160Upgrade bind-libs-32bitUpgrade python3-bindUpgrade libisccc160Upgrade bind-libs-x86Upgrade libisccfg160 | Jan 4, 2016 | Dec 16, 2015 |
| Ubuntu | — | Upgrade bind9 | Dec 18, 2015 | Dec 15, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub