buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3.12 Bind_advisory13 | — | — | Dec 19, 2016 | Sep 28, 2016 |
| Aix 6.1.9 Bind_advisory13 | — | — | Dec 19, 2016 | Sep 28, 2016 |
| Aix 7.1.3 Bind_advisory13 | — | — | Dec 19, 2016 | Sep 28, 2016 |
| Aix 7.1.4 Bind_advisory13 | — | — | Dec 19, 2016 | Sep 28, 2016 |
| Aix 7.2.0 Bind_advisory13 | — | — | Dec 19, 2016 | Sep 28, 2016 |
| Alpine Linux | — | Upgrade bind | Aug 30, 2017 | Sep 28, 2016 |
| Amazon_linux | — | Upgrade bind | Sep 28, 2016 | Sep 28, 2016 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 28, 2016 |
| Centos_linux | — | Upgrade bind-libsUpgrade bind-sdbUpgrade bind-libs-liteUpgrade bind-lite-develUpgrade bind97Upgrade bind-chrootUpgrade bind-pkcs11Upgrade bind-develUpgrade bind-pkcs11-utilsUpgrade bindUpgrade bind-utilsUpgrade bind97-develUpgrade bind97-libsUpgrade bind-pkcs11-develUpgrade bind-sdb-chrootUpgrade bind97-utilsUpgrade bind97-chrootUpgrade bind-licenseUpgrade bind-pkcs11-libs | Oct 21, 2016 | Sep 28, 2016 |
| Debian | — | Upgrade bind9 | Sep 28, 2016 | Sep 27, 2016 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Oct 12, 2016 | Sep 28, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 27, 2016 |
| Freebsd | — | Upgrade FreeBSDUpgrade bind9-develUpgrade bind911Upgrade bind99Upgrade bind910 | Nov 14, 2016 | Sep 28, 2016 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Sep 28, 2016 |
| Hpux | — | Update NameService.BIND-RUN to the latest versionUpdate NameService.BIND-AUX to the latest version | Aug 11, 2017 | Sep 28, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade bind-libs-liteUpgrade bind-licenseUpgrade bind-chrootUpgrade bind-utilsUpgrade bindUpgrade bind-libs | Nov 30, 2017 | Sep 28, 2016 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory13 | Nov 30, 2017 | Sep 28, 2016 |
| Oracle Solaris | — | Upgrade service/network/dns/bind to version 9.6.3.11.8-0.175.3.14.0.2.0 on Solaris 11.3Upgrade network/dns/bind to version 9.6.3.11.8-0.175.3.14.0.2.0 on Solaris 11.3 | May 29, 2017 | Sep 28, 2016 |
| Oracle_linux | — | Upgrade bind97-libsUpgrade bind-pkcs11-develUpgrade bind-licenseUpgrade caching-nameserverUpgrade bind97-develUpgrade bind-libbind-develUpgrade bind-pkcs11-libsUpgrade bind97-utilsUpgrade bind-chrootUpgrade bind-pkcs11-utilsUpgrade bind-sdbUpgrade bindUpgrade bind-sdb-chrootUpgrade bind-pkcs11Upgrade bind-libs-liteUpgrade bind-utilsUpgrade bind97Upgrade bind-lite-develUpgrade bind-develUpgrade bind97-chrootUpgrade bind-libs | Sep 28, 2016 | Sep 27, 2016 |
| Redhat_linux | — | Upgrade bind-lite-develUpgrade bind-libs-liteUpgrade bind97-debuginfoUpgrade caching-nameserverUpgrade bind-chrootUpgrade bind-pkcs11-utilsUpgrade bind-utilsUpgrade bind-debuginfoUpgrade bind97-chrootNo solution existsUpgrade bind-sdb-chrootUpgrade bind-develUpgrade bind97-utilsUpgrade bind-pkcs11-develUpgrade bind-pkcs11-libsUpgrade bindUpgrade bind97-develUpgrade bind97Upgrade bind97-libsUpgrade bind-licenseUpgrade bind-sdbUpgrade bind-pkcs11Upgrade bind-libbind-develUpgrade bind-libs | Oct 21, 2016 | Sep 28, 2016 |
| Suse | — | Upgrade python-bindUpgrade python3-bindUpgrade libisccc1600Upgrade libisc166-32bitUpgrade libirs-develUpgrade libirs1601Upgrade libirs160Upgrade bind-utilsUpgrade bind-libs-32bitUpgrade libisccfg1600Upgrade bind-chrootenvUpgrade bind-develUpgrade libisccc160Upgrade bind-devel-32bitUpgrade libbind9-1600Upgrade bind-libs-x86Upgrade libdns169Upgrade bind-libsUpgrade libisc166Upgrade bind-docUpgrade libdns1605Upgrade bindUpgrade libisccfg160Upgrade libns1604Upgrade libisc1606Upgrade libbind9-160Upgrade liblwres160 | Oct 12, 2016 | Sep 27, 2016 |
| Ubuntu | — | Upgrade bind9 | Sep 27, 2016 | Sep 27, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub