ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (secondary DNS server crash) via a large AXFR response, and possibly allows IXFR servers to cause a denial of service (IXFR client crash) via a large IXFR response and allows remote authenticated users to cause a denial of service (primary DNS server crash) via a large UPDATE message.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Jul 6, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 1, 2016 |
| Freebsd | — | Upgrade knotUpgrade powerdnsUpgrade bind99Upgrade nsdUpgrade bind911Upgrade bind9-develUpgrade bind910Upgrade knot1Upgrade knot2 | Dec 10, 2025 | Aug 10, 2016 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Jul 6, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bind-libsUpgrade bind-pkcs11-libsUpgrade bind-licenseUpgrade bind-chrootUpgrade bind-libs-liteUpgrade bind-utilsUpgrade bind-pkcs11Upgrade bindUpgrade bind-pkcs11-utils | Dec 4, 2019 | Jul 6, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade bind-chrootUpgrade bindUpgrade bind-utilsUpgrade bind-pkcs11Upgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade bind-licenseUpgrade bind-libsUpgrade bind-pkcs11-libs | Dec 18, 2019 | Jul 6, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade bindUpgrade bind-licenseUpgrade bind-libs-liteUpgrade bind-libsUpgrade bind-utilsUpgrade bind-pkcs11Upgrade bind-pkcs11-utilsUpgrade bind-chrootUpgrade bind-pkcs11-libs | Nov 19, 2019 | Jul 6, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 4, 2016 |
| Suse | — | Upgrade libbind9-1600Upgrade libdns169Upgrade bind-docUpgrade libisccfg1600Upgrade libirs160Upgrade libisc166Upgrade bind-utilsUpgrade libdns1605Upgrade libisccfg160Upgrade libisc166-32bitUpgrade libbind9-160Upgrade libisccc1600Upgrade bindUpgrade libisc1606Upgrade libirs-develUpgrade bind-devel-32bitUpgrade libirs1601Upgrade libisccc160Upgrade libns1604Upgrade bind-libsUpgrade bind-libs-32bitUpgrade bind-chrootenvUpgrade python3-bindUpgrade liblwres160Upgrade bind-libs-x86Upgrade bind-develUpgrade python-bind | Apr 13, 2017 | Jul 6, 2016 |
| Ubuntu | — | Upgrade bind9 (Ubuntu Pro)Upgrade lwresd (Ubuntu Pro) | Nov 29, 2022 | Jul 6, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 6, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub