Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurred in an unusual order. Affects BIND 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0-P3, 9.11.1b1->9.11.1rc1, and 9.9.9-S8.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Jan 16, 2019 | Jan 16, 2019 |
| Amazon_linux | — | Upgrade bind | May 3, 2017 | Apr 12, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 16, 2019 |
| Centos_linux | — | Upgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade bind-debuginfoUpgrade bind-utilsUpgrade bind-libsUpgrade bind-develUpgrade bind-pkcs11Upgrade bind-sdbUpgrade bindUpgrade bind-chrootUpgrade bind-lite-develUpgrade bind-sdb-chrootUpgrade bind-licenseUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-devel | Apr 20, 2017 | Apr 12, 2017 |
| Debian | — | Upgrade bind9 | May 15, 2017 | Apr 12, 2017 |
| Dns Bind | — | Upgrade ISC BIND to latest version | May 15, 2017 | May 15, 2017 |
| Freebsd | — | Upgrade bind911Upgrade bind910Upgrade bind9-develUpgrade bind99 | Apr 13, 2017 | Apr 13, 2017 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Aug 17, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade bindUpgrade bind-licenseUpgrade bind-libsUpgrade bind-libs-liteUpgrade bind-utilsUpgrade bind-chroot | Oct 4, 2019 | Jan 16, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bind-libs-liteUpgrade bind-pkcs11-utilsUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-pkcs11-libsUpgrade bind-licenseUpgrade bind-pkcs11Upgrade bindUpgrade bind-libs | Oct 4, 2019 | Jan 16, 2019 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4Upgrade network/dns/bind to version 9.10.6.1.0-0.175.3.35.0.3.0 on Solaris 11.3Upgrade service/network/dns/bind to version 9.10.6.1.0-0.175.3.35.0.3.0 on Solaris 11.3 | Aug 24, 2018 | Aug 24, 2018 |
| Oracle_linux | — | Upgrade bind-licenseUpgrade bindUpgrade bind-sdbUpgrade bind-sdb-chrootUpgrade bind-pkcs11-develUpgrade bind-pkcs11Upgrade bind-pkcs11-libsUpgrade bind-lite-develUpgrade bind-chrootUpgrade bind-develUpgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade bind-utilsUpgrade bind-libs | Apr 19, 2017 | Apr 12, 2017 |
| Redhat_linux | — | No solution existsUpgrade bind-sdb-chrootUpgrade bindUpgrade bind-pkcs11-develUpgrade bind-pkcs11-utilsUpgrade bind-develUpgrade bind-licenseUpgrade bind-pkcs11Upgrade bind-pkcs11-libsUpgrade bind-sdbUpgrade bind-lite-develUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-libsUpgrade bind-libs-liteUpgrade bind-debuginfo | Apr 19, 2017 | Apr 12, 2017 |
| Suse | — | Upgrade libisccc160Upgrade bind-devel-32bitUpgrade bindUpgrade liblwres160Upgrade libisc166-32bitUpgrade bind-libs-x86Upgrade python-bindUpgrade bind-develUpgrade bind-chrootenvUpgrade bind-utilsUpgrade bind-libs-32bitUpgrade libisccfg1600Upgrade libns1604Upgrade libisc166Upgrade libdns1605Upgrade libisccfg160Upgrade python3-bindUpgrade libirs160Upgrade bind-docUpgrade libirs-develUpgrade libdns169Upgrade libisc1606Upgrade libirs1601Upgrade libbind9-1600Upgrade libbind9-160Upgrade bind-libsUpgrade libisccc1600 | Apr 13, 2017 | Apr 12, 2017 |
| Ubuntu | — | Upgrade bind9 | Apr 17, 2017 | Apr 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub