Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Jan 16, 2019 | Jan 16, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 16, 2019 |
| Centos_linux | — | Upgrade bind-licenseUpgrade bindUpgrade bind-pkcs11-develUpgrade bind-develUpgrade bind-pkcs11Upgrade bind-sdb-chrootUpgrade bind-libsUpgrade bind-lite-develUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade bind-debuginfoUpgrade bind-sdbUpgrade bind-pkcs11-libs | Feb 16, 2017 | Feb 15, 2017 |
| Debian | — | Upgrade bind9 | Feb 27, 2017 | Feb 15, 2017 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 13, 2017 | Feb 13, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 23, 2017 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Aug 17, 2017 |
| Hpux | — | Update NameService.BIND-AUX to the latest versionUpdate NameService.BIND-RUN to the latest version | Aug 11, 2017 | Jun 30, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade bind-utilsUpgrade bind-chrootUpgrade bind-libsUpgrade bindUpgrade bind-libs-liteUpgrade bind-license | Oct 11, 2019 | Jan 16, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bind-libs-liteUpgrade bind-pkcs11-utilsUpgrade bind-utilsUpgrade bind-pkcs11Upgrade bind-chrootUpgrade bindUpgrade bind-libsUpgrade bind-licenseUpgrade bind-pkcs11-libs | Oct 11, 2019 | Jan 16, 2019 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Oct 19, 2018 |
| Oracle_linux | — | Upgrade bind-licenseUpgrade bind-lite-develUpgrade bind-sdb-chrootUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-develUpgrade bindUpgrade bind-libs-liteUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11Upgrade bind-pkcs11-libsUpgrade bind-libsUpgrade bind-pkcs11-develUpgrade bind-sdb | Feb 16, 2017 | Feb 8, 2017 |
| Redhat_linux | — | Upgrade bind-utilsUpgrade bind-sdbUpgrade bind-pkcs11-develUpgrade bindUpgrade bind-licenseUpgrade bind-sdb-chrootUpgrade bind-libs-liteUpgrade bind-debuginfoUpgrade bind-pkcs11Upgrade bind-develUpgrade bind-libsUpgrade bind-chrootUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11-libsUpgrade bind-lite-devel | Feb 16, 2017 | Feb 15, 2017 |
| Suse | — | Upgrade libirs-develUpgrade libirs160Upgrade libisccfg1600Upgrade libdns1605Upgrade bind-develUpgrade python-bindUpgrade libisccc1600Upgrade bind-docUpgrade libns1604Upgrade libisc166Upgrade libbind9-1600Upgrade bind-utilsUpgrade bindUpgrade bind-devel-32bitUpgrade libdns169Upgrade bind-chrootenvUpgrade bind-libs-32bitUpgrade libbind9-160Upgrade libisccfg160Upgrade bind-libsUpgrade libirs1601Upgrade libisccc160Upgrade libisc166-32bitUpgrade bind-libs-x86Upgrade libisc1606Upgrade liblwres160Upgrade python3-bind | Mar 3, 2017 | Feb 15, 2017 |
| Ubuntu | — | Upgrade bind9 | Feb 17, 2017 | Feb 15, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub