"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Affects BIND 9.7.0->9.8.8, 9.9.0->9.9.13, 9.10.0->9.10.8, 9.11.0->9.11.4, 9.12.0->9.12.2, 9.13.0->9.13.2.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Jan 16, 2019 | Jan 16, 2019 |
| Amazon Linux Ami 2 | — | Upgrade bind-chrootUpgrade bind-utilsUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11Upgrade bind-libs-liteUpgrade bind-develUpgrade bind-pkcs11-develUpgrade bind-libsUpgrade bind-sdb-chrootUpgrade bind-lite-develUpgrade bind-pkcs11-libsUpgrade bind-debuginfoUpgrade bind-sdbUpgrade bind | Apr 27, 2020 | Jan 16, 2019 |
| Amazon_linux | — | Upgrade bind | Sep 20, 2018 | Aug 27, 2018 |
| Centos_linux | — | Upgrade bind-libs-liteUpgrade bind-pkcs11-libsUpgrade bind-licenseUpgrade bind-pkcs11-utilsUpgrade bind-develUpgrade bind-pkcs11-develUpgrade bind-sdb-chrootUpgrade bind-pkcs11Upgrade bind-lite-develUpgrade bind-libsUpgrade bindUpgrade bind-sdbUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-debuginfo | Aug 30, 2018 | Aug 27, 2018 |
| Debian | — | Upgrade bind9 | Feb 19, 2019 | Jan 16, 2019 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Aug 10, 2018 | Aug 10, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 27, 2018 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Mar 14, 2019 | Jan 16, 2019 |
| Hpux | — | Update NameService to the latest version | Sep 16, 2019 | Jan 16, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bind-pkcs11Upgrade bind-pkcs11-libsUpgrade bind-chrootUpgrade bind-libsUpgrade bind-utilsUpgrade bind-licenseUpgrade bind-libs-liteUpgrade bindUpgrade bind-pkcs11-utils | Sep 27, 2018 | Aug 8, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade bind-utilsUpgrade bind-pkcs11Upgrade bindUpgrade bind-chrootUpgrade bind-licenseUpgrade bind-pkcs11-libsUpgrade bind-libs | Sep 27, 2018 | Aug 8, 2018 |
| Oracle Solaris | — | Upgrade service/network/dns/bind to version 9.10.8.1.0-11.4.3.0.1.1.0 on Solaris 11.4Upgrade network/dns/bind to version 9.10.8.1.0-11.4.3.0.1.1.0 on Solaris 11.4 | Nov 19, 2018 | Nov 19, 2018 |
| Oracle_linux | — | Upgrade bind-sdbUpgrade bindUpgrade bind-licenseUpgrade bind-pkcs11-develUpgrade bind-libsUpgrade bind-lite-develUpgrade bind-chrootUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-utilsUpgrade bind-sdb-chrootUpgrade bind-libs-liteUpgrade bind-utilsUpgrade bind-pkcs11Upgrade bind-devel | Aug 28, 2018 | Aug 8, 2018 |
| Redhat_linux | — | Upgrade bind-libsUpgrade bind-lite-develUpgrade bind-pkcs11-utilsUpgrade bind-utilsUpgrade bind-libs-liteUpgrade bind-chrootUpgrade bind-sdb-chrootUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-develNo solution existsUpgrade bind-develUpgrade bind-pkcs11Upgrade bind-debuginfoUpgrade bind-sdbUpgrade bind-licenseUpgrade bind | Aug 28, 2018 | Aug 27, 2018 |
| Suse | — | Upgrade libisccc160-32bitUpgrade bind-chrootenvUpgrade libirs-develUpgrade libdns169Upgrade libirs160Upgrade libirs160-32bitUpgrade libbind9-1600Upgrade libisc166Upgrade bind-lwresdUpgrade python-bindUpgrade bind-docUpgrade libdns169-32bitUpgrade bind-libs-32bitUpgrade bindUpgrade bind-devel-32bitUpgrade libirs1601Upgrade libbind9-160Upgrade libisccc160Upgrade libns1604Upgrade python3-bindUpgrade libisccfg160-32bitUpgrade bind-libsUpgrade libisccfg1600Upgrade liblwres160Upgrade libdns1605Upgrade liblwres160-32bitUpgrade bind-utilsUpgrade libisccfg160Upgrade libisc166-32bitUpgrade bind-develUpgrade libisc1606Upgrade libbind9-160-32bitUpgrade libisccc1600 | Jun 3, 2019 | Aug 27, 2018 |
| Ubuntu | — | Upgrade bind9 | Oct 2, 2018 | Aug 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub