A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Nov 8, 2019 | Oct 9, 2019 |
| Centos_linux | — | Upgrade bind-pkcs11-utils-debuginfoUpgrade bind-export-libsUpgrade bind-pkcs11-debuginfoUpgrade bind-licenseUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-pkcs11-develUpgrade bind-sdbUpgrade bind-libs-lite-debuginfoUpgrade bind-export-develUpgrade bind-utilsUpgrade bindUpgrade bind-debugsourceUpgrade bind-lite-develUpgrade bind-pkcs11-libsUpgrade bind-chrootUpgrade bind-libsUpgrade bind-pkcs11Upgrade bind-develUpgrade bind-pkcs11-utilsUpgrade bind-debuginfoUpgrade bind-sdb-chrootUpgrade python3-bindUpgrade bind-libs-debuginfoUpgrade bind-libs-liteUpgrade bind-export-libs-debuginfoUpgrade bind-sdb-debuginfo | Aug 28, 2019 | Jul 9, 2019 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Oct 9, 2019 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jun 27, 2019 | Jun 27, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 23, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-bindUpgrade bind-pkcs11-libsUpgrade bind-libs-liteUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-pkcs11-utilsUpgrade bind-libsUpgrade bind-export-libsUpgrade bind-licenseUpgrade bindUpgrade bind-export-develUpgrade bind-pkcs11 | Nov 19, 2019 | Oct 9, 2019 |
| Oracle Solaris | — | Upgrade service/network/dns/bind to version 9.11.8.0.0-11.4.12.0.1.2.0 on Solaris 11.4Upgrade network/dns/bind to version 9.11.8.0.0-11.4.12.0.1.2.0 on Solaris 11.4 | Aug 21, 2019 | Aug 21, 2019 |
| Oracle_linux | — | Upgrade bind-develUpgrade bind-licenseUpgrade bind-libs-liteUpgrade bind-export-libsUpgrade bindUpgrade bind-pkcs11-develUpgrade bind-sdb-chrootUpgrade bind-export-develUpgrade bind-pkcs11-utilsUpgrade bind-libsUpgrade bind-pkcs11-libsUpgrade bind-pkcs11Upgrade python3-bindUpgrade bind-chrootUpgrade bind-sdbUpgrade bind-lite-develUpgrade bind-utils | Jul 22, 2024 | Jun 19, 2019 |
| Redhat_linux | — | Upgrade bind-lite-develUpgrade bind-chrootUpgrade bind-pkcs11Upgrade bind-utilsUpgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade bind-sdbUpgrade bind-libsUpgrade bindUpgrade bind-libs-lite-debuginfoUpgrade bind-export-libsUpgrade bind-debuginfoUpgrade bind-export-libs-debuginfoUpgrade bind-debugsourceUpgrade bind-pkcs11-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-develUpgrade bind-pkcs11-develUpgrade bind-export-develUpgrade bind-libs-debuginfoUpgrade python3-bindUpgrade bind-licenseUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-sdb-chrootUpgrade bind-sdb-debuginfoUpgrade bind-pkcs11-utils-debuginfo | Jul 11, 2019 | Jul 9, 2019 |
| Suse | — | Upgrade libirs160Upgrade bind-docUpgrade python3-bindUpgrade libisc166Upgrade libdns169-32bitUpgrade bind-chrootenvUpgrade libisccfg160-32bitUpgrade libisccc1600Upgrade libirs1601Upgrade libns1604Upgrade bind-lwresdUpgrade libbind9-160-32bitUpgrade bind-develUpgrade bind-utilsUpgrade libisccc160-32bitUpgrade python-bindUpgrade libirs-develUpgrade bind-devel-32bitUpgrade libdns1605Upgrade libirs160-32bitUpgrade liblwres160-32bitUpgrade libisccfg1600Upgrade libdns169Upgrade libisc166-32bitUpgrade libbind9-1600Upgrade libbind9-160Upgrade libisccfg160Upgrade liblwres160Upgrade libisc1606Upgrade libisccc160Upgrade bind | Oct 2, 2019 | Jun 20, 2019 |
| Ubuntu | — | Upgrade bind9 | Jun 20, 2019 | Jun 20, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub