A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Nov 8, 2019 | Oct 9, 2019 |
| Centos_linux | — | Upgrade bind-pkcs11-utilsUpgrade bind-develUpgrade bind-sdb-chrootUpgrade bind-sdb-debuginfoUpgrade bind-lite-develUpgrade bind-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-libs-debuginfoUpgrade bind-chrootUpgrade python3-bindUpgrade bind-libs-liteUpgrade bind-export-libs-debuginfoUpgrade bind-pkcs11Upgrade bind-libsUpgrade bind-pkcs11-develUpgrade bind-utils-debuginfoUpgrade bind-debugsourceUpgrade bind-libs-lite-debuginfoUpgrade bindUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-utilsUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-sdbUpgrade bind-export-develUpgrade bind-export-libsUpgrade bind-licenseUpgrade bind-pkcs11-debuginfo | Aug 28, 2019 | Jul 9, 2019 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Oct 9, 2019 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jun 27, 2019 | Jun 27, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 23, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bind-pkcs11-libsUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-libs-liteUpgrade python3-bindUpgrade bind-libsUpgrade bind-export-develUpgrade bindUpgrade bind-pkcs11-utilsUpgrade bind-licenseUpgrade bind-pkcs11Upgrade bind-export-libs | Nov 19, 2019 | Oct 9, 2019 |
| Oracle Solaris | — | Upgrade network/dns/bind to version 9.11.8.0.0-11.4.12.0.1.2.0 on Solaris 11.4Upgrade service/network/dns/bind to version 9.11.8.0.0-11.4.12.0.1.2.0 on Solaris 11.4 | Aug 21, 2019 | Aug 21, 2019 |
| Oracle_linux | — | Upgrade bind-sdbUpgrade bind-lite-develUpgrade bind-chrootUpgrade bind-pkcs11Upgrade bind-pkcs11-libsUpgrade bind-libsUpgrade bind-utilsUpgrade python3-bindUpgrade bindUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11-develUpgrade bind-export-develUpgrade bind-licenseUpgrade bind-develUpgrade bind-libs-liteUpgrade bind-export-libsUpgrade bind-sdb-chroot | Jul 22, 2024 | Jun 19, 2019 |
| Redhat_linux | — | Upgrade bind-pkcs11Upgrade bind-debugsourceUpgrade bind-export-libsUpgrade bind-utils-debuginfoUpgrade bind-lite-develUpgrade bind-libs-lite-debuginfoUpgrade bind-debuginfoUpgrade bind-sdbUpgrade bindUpgrade bind-chrootUpgrade bind-develUpgrade bind-pkcs11-debuginfoUpgrade bind-export-libs-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-libsUpgrade bind-libs-liteUpgrade bind-utilsUpgrade bind-pkcs11-develUpgrade bind-export-develUpgrade bind-sdb-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-licenseUpgrade bind-sdb-chrootUpgrade python3-bindUpgrade bind-libs-debuginfoUpgrade bind-pkcs11-utils-debuginfo | Jul 11, 2019 | Jul 9, 2019 |
| Suse | — | Upgrade bindUpgrade libisccc160Upgrade libbind9-1600Upgrade liblwres160Upgrade libbind9-160Upgrade libisc1606Upgrade libisccfg160Upgrade libisccc160-32bitUpgrade libirs-develUpgrade python-bindUpgrade bind-utilsUpgrade libdns169Upgrade libirs160Upgrade libbind9-160-32bitUpgrade liblwres160-32bitUpgrade bind-docUpgrade libdns1605Upgrade libisccfg160-32bitUpgrade libisc166Upgrade libirs1601Upgrade libisccfg1600Upgrade libirs160-32bitUpgrade python3-bindUpgrade bind-devel-32bitUpgrade bind-develUpgrade libns1604Upgrade bind-lwresdUpgrade libisccc1600Upgrade libisc166-32bitUpgrade libdns169-32bitUpgrade bind-chrootenv | Oct 2, 2019 | Jun 20, 2019 |
| Ubuntu | — | Upgrade bind9 | Jun 20, 2019 | Jun 20, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub