A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-service against a server if it was configured to use the DNS64 feature and other preconditions were met. Affects BIND 9.8.0 -> 9.8.8-P1, 9.9.0 -> 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.0 -> 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0 -> 9.11.0-P3, 9.11.1b1->9.11.1rc1, 9.9.3-S1 -> 9.9.9-S8.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Jan 16, 2019 | Jan 16, 2019 |
| Amazon_linux | — | Upgrade bind | May 2, 2017 | Apr 12, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 16, 2019 |
| Centos_linux | — | Upgrade bind-pkcs11Upgrade bind-pkcs11-develUpgrade bind-licenseUpgrade bind-sdb-chrootUpgrade bindUpgrade bind-libsUpgrade bind-debuginfoUpgrade bind-chrootUpgrade bind-develUpgrade bind-sdbUpgrade bind-utilsUpgrade bind-lite-develUpgrade bind-pkcs11-libsUpgrade bind-libs-liteUpgrade bind-pkcs11-utils | Apr 20, 2017 | Apr 12, 2017 |
| Debian | — | Upgrade bind9 | May 15, 2017 | Apr 12, 2017 |
| Dns Bind | — | Upgrade ISC BIND to latest version | May 15, 2017 | May 15, 2017 |
| Freebsd | — | Upgrade bind9-develUpgrade bind99Upgrade bind911Upgrade bind910 | Apr 13, 2017 | Apr 13, 2017 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Aug 17, 2017 |
| Hpux | — | Update NameService.BIND-RUN to the latest versionUpdate NameService.BIND-AUX to the latest version | Aug 11, 2017 | Jun 30, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade bind-licenseUpgrade bind-chrootUpgrade bind-libs-liteUpgrade bind-utilsUpgrade bindUpgrade bind-libs | Oct 4, 2019 | Jan 16, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bindUpgrade bind-pkcs11Upgrade bind-pkcs11-utilsUpgrade bind-licenseUpgrade bind-chrootUpgrade bind-pkcs11-libsUpgrade bind-libsUpgrade bind-utilsUpgrade bind-libs-lite | Oct 4, 2019 | Jan 16, 2019 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Oct 19, 2018 |
| Oracle_linux | — | Upgrade bind-pkcs11-utilsUpgrade bind-sdbUpgrade bind-libsUpgrade bind-lite-develUpgrade bind-libs-liteUpgrade bind-develUpgrade bindUpgrade bind-utilsUpgrade bind-sdb-chrootUpgrade bind-chrootUpgrade bind-pkcs11Upgrade bind-licenseUpgrade bind-pkcs11-develUpgrade bind-pkcs11-libs | Apr 19, 2017 | Apr 12, 2017 |
| Redhat_linux | — | Upgrade bind-pkcs11-develUpgrade bind-licenseUpgrade bind-pkcs11-libsUpgrade bind-sdbUpgrade bind-debuginfoUpgrade bindUpgrade bind-pkcs11Upgrade bind-libsUpgrade bind-libs-liteUpgrade bind-pkcs11-utilsUpgrade bind-chrootUpgrade bind-lite-develUpgrade bind-utilsUpgrade bind-sdb-chrootUpgrade bind-devel | Apr 19, 2017 | Apr 12, 2017 |
| Suse | — | Upgrade libuv1Upgrade libdns169Upgrade bind-libs-32bitUpgrade bind-docUpgrade bind-libsUpgrade libirs160Upgrade libns1604-32bitUpgrade libisccc1600Upgrade libisccfg1600-32bitUpgrade libisccc1600-32bitUpgrade bind-utilsUpgrade libirs-develUpgrade sysuser-toolsUpgrade bind-devel-32bitUpgrade libisc166Upgrade bind-chrootenvUpgrade bindUpgrade libisccfg1600Upgrade libuv-develUpgrade bind-develUpgrade sysuser-shadowUpgrade libbind9-160Upgrade python3-bindUpgrade libisc1606-32bitUpgrade libbind9-1600Upgrade liblwres160Upgrade libirs1601-32bitUpgrade libns1604Upgrade python-bindUpgrade libisccfg160Upgrade libirs1601Upgrade libisccc160Upgrade libisc166-32bitUpgrade bind-libs-x86Upgrade libdns1605-32bitUpgrade libuv1-32bitUpgrade libbind9-1600-32bitUpgrade libisc1606Upgrade libdns1605 | Apr 13, 2017 | Apr 12, 2017 |
| Ubuntu | — | Upgrade bind9 | Apr 17, 2017 | Apr 12, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub