"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Affects BIND 9.7.0->9.8.8, 9.9.0->9.9.13, 9.10.0->9.10.8, 9.11.0->9.11.4, 9.12.0->9.12.2, 9.13.0->9.13.2.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Jan 16, 2019 | Jan 16, 2019 |
| Amazon Linux Ami 2 | — | Upgrade bind-libsUpgrade bind-pkcs11-utilsUpgrade bind-develUpgrade bind-sdb-chrootUpgrade bind-libs-liteUpgrade bind-pkcs11Upgrade bind-lite-develUpgrade bind-pkcs11-develUpgrade bind-pkcs11-libsUpgrade bind-chrootUpgrade bind-utilsUpgrade bindUpgrade bind-sdbUpgrade bind-debuginfo | Apr 27, 2020 | Jan 16, 2019 |
| Amazon_linux | — | Upgrade bind | Sep 20, 2018 | Aug 27, 2018 |
| Centos_linux | — | Upgrade bind-chrootUpgrade bind-libsUpgrade bind-lite-develUpgrade bind-utilsUpgrade bind-debuginfoUpgrade bind-sdbUpgrade bindUpgrade bind-pkcs11-develUpgrade bind-licenseUpgrade bind-sdb-chrootUpgrade bind-pkcs11Upgrade bind-pkcs11-utilsUpgrade bind-pkcs11-libsUpgrade bind-libs-liteUpgrade bind-devel | Aug 30, 2018 | Aug 27, 2018 |
| Debian | — | Upgrade bind9 | Feb 19, 2019 | Jan 16, 2019 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Aug 10, 2018 | Aug 10, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 27, 2018 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Mar 14, 2019 | Jan 16, 2019 |
| Hpux | — | Update NameService to the latest version | Sep 16, 2019 | Jan 16, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bind-libsUpgrade bind-chrootUpgrade bind-pkcs11-libsUpgrade bind-utilsUpgrade bind-pkcs11Upgrade bind-licenseUpgrade bind-libs-liteUpgrade bindUpgrade bind-pkcs11-utils | Sep 27, 2018 | Aug 8, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade bind-utilsUpgrade bind-pkcs11Upgrade bindUpgrade bind-libs-liteUpgrade bind-chrootUpgrade bind-pkcs11-utilsUpgrade bind-licenseUpgrade bind-pkcs11-libsUpgrade bind-libs | Sep 27, 2018 | Aug 8, 2018 |
| Oracle Solaris | — | Upgrade network/dns/bind to version 9.10.8.1.0-11.4.3.0.1.1.0 on Solaris 11.4Upgrade service/network/dns/bind to version 9.10.8.1.0-11.4.3.0.1.1.0 on Solaris 11.4 | Nov 19, 2018 | Nov 19, 2018 |
| Oracle_linux | — | Upgrade bind-sdbUpgrade bindUpgrade bind-licenseUpgrade bind-pkcs11-utilsUpgrade bind-sdb-chrootUpgrade bind-libsUpgrade bind-pkcs11-develUpgrade bind-utilsUpgrade bind-pkcs11-libsUpgrade bind-develUpgrade bind-pkcs11Upgrade bind-lite-develUpgrade bind-libs-liteUpgrade bind-chroot | Aug 28, 2018 | Aug 8, 2018 |
| Redhat_linux | — | Upgrade bind-licenseUpgrade bind-sdbUpgrade bind-debuginfoUpgrade bindUpgrade bind-pkcs11-develUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-sdb-chrootUpgrade bind-libsUpgrade bind-lite-develUpgrade bind-pkcs11-libsNo solution existsUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11Upgrade bind-libs-liteUpgrade bind-devel | Aug 28, 2018 | Aug 27, 2018 |
| Suse | — | Upgrade libisccfg1600Upgrade libisccfg160Upgrade libirs1601Upgrade libbind9-160Upgrade python3-bindUpgrade libns1604Upgrade liblwres160Upgrade libisc166-32bitUpgrade libisccfg160-32bitUpgrade libisccc1600Upgrade libdns1605Upgrade liblwres160-32bitUpgrade libisc1606Upgrade libbind9-160-32bitUpgrade bind-develUpgrade bind-libsUpgrade libisccc160Upgrade bind-utilsUpgrade bindUpgrade libirs-develUpgrade bind-libs-32bitUpgrade bind-chrootenvUpgrade libisccc160-32bitUpgrade libdns169Upgrade python-bindUpgrade bind-docUpgrade bind-devel-32bitUpgrade bind-lwresdUpgrade libisc166Upgrade libirs160-32bitUpgrade libbind9-1600Upgrade libirs160Upgrade libdns169-32bit | Jun 3, 2019 | Aug 27, 2018 |
| Ubuntu | — | Upgrade bind9 | Oct 2, 2018 | Aug 27, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub