Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Jan 16, 2019 | Jan 16, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 16, 2019 |
| Centos_linux | — | Upgrade bind-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-lite-develUpgrade bind-chrootUpgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade bind-sdbUpgrade bind-utilsUpgrade bind-sdb-chrootUpgrade bind-develUpgrade bind-pkcs11Upgrade bindUpgrade bind-licenseUpgrade bind-libsUpgrade bind-pkcs11-devel | Feb 16, 2017 | Feb 15, 2017 |
| Debian | — | Upgrade bind9 | Feb 27, 2017 | Feb 15, 2017 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 13, 2017 | Feb 13, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 23, 2017 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Aug 17, 2017 |
| Hpux | — | Update NameService.BIND-RUN to the latest versionUpdate NameService.BIND-AUX to the latest version | Aug 11, 2017 | Jun 30, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade bind-libsUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-licenseUpgrade bindUpgrade bind-libs-lite | Oct 11, 2019 | Jan 16, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bind-licenseUpgrade bind-pkcs11-libsUpgrade bind-libs-liteUpgrade bind-libsUpgrade bind-pkcs11Upgrade bind-utilsUpgrade bind-pkcs11-utilsUpgrade bindUpgrade bind-chroot | Oct 11, 2019 | Jan 16, 2019 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Oct 19, 2018 |
| Oracle_linux | — | Upgrade bind-sdb-chrootUpgrade bind-chrootUpgrade bind-pkcs11-utilsUpgrade bind-develUpgrade bindUpgrade bind-libs-liteUpgrade bind-licenseUpgrade bind-lite-develUpgrade bind-utilsUpgrade bind-pkcs11-develUpgrade bind-pkcs11Upgrade bind-pkcs11-libsUpgrade bind-libsUpgrade bind-sdb | Feb 16, 2017 | Feb 8, 2017 |
| Redhat_linux | — | Upgrade bind-libsUpgrade bind-pkcs11-utilsUpgrade bind-chrootUpgrade bind-pkcs11Upgrade bind-pkcs11-libsUpgrade bind-lite-develUpgrade bind-debuginfoUpgrade bind-develUpgrade bind-sdbUpgrade bindUpgrade bind-sdb-chrootUpgrade bind-licenseUpgrade bind-libs-liteUpgrade bind-utilsUpgrade bind-pkcs11-devel | Feb 16, 2017 | Feb 15, 2017 |
| Suse | — | Upgrade bind-docUpgrade bind-devel-32bitUpgrade libdns1605Upgrade bind-develUpgrade libirs-develUpgrade bind-libs-32bitUpgrade python-bindUpgrade libbind9-1600Upgrade libisc166Upgrade bindUpgrade libisccfg1600Upgrade libns1604Upgrade bind-utilsUpgrade libisccc1600Upgrade libirs160Upgrade bind-chrootenvUpgrade libdns169Upgrade libisc166-32bitUpgrade libirs1601Upgrade bind-libsUpgrade liblwres160Upgrade libisc1606Upgrade libbind9-160Upgrade python3-bindUpgrade libisccfg160Upgrade bind-libs-x86Upgrade libisccc160 | Mar 3, 2017 | Feb 15, 2017 |
| Ubuntu | — | Upgrade bind9 | Feb 17, 2017 | Feb 15, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub