A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Nov 8, 2019 | Oct 9, 2019 |
| Centos_linux | — | Upgrade bind-pkcs11-libs-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-utilsUpgrade bind-export-libsUpgrade bind-pkcs11-develUpgrade bind-export-develUpgrade bind-sdbUpgrade bind-debugsourceUpgrade bind-pkcs11-utils-debuginfoUpgrade bindUpgrade bind-licenseUpgrade bind-libs-lite-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-libsUpgrade bind-sdb-chrootUpgrade bind-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-lite-develUpgrade bind-develUpgrade bind-pkcs11-utilsUpgrade bind-export-libs-debuginfoUpgrade bind-chrootUpgrade python3-bindUpgrade bind-libs-debuginfoUpgrade bind-sdb-debuginfoUpgrade bind-pkcs11Upgrade bind-libs-lite | Aug 28, 2019 | Jul 9, 2019 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Oct 9, 2019 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jun 27, 2019 | Jun 27, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 23, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-bindUpgrade bind-chrootUpgrade bind-libs-liteUpgrade bind-pkcs11-libsUpgrade bind-utilsUpgrade bind-libsUpgrade bind-pkcs11-utilsUpgrade bindUpgrade bind-export-libsUpgrade bind-pkcs11Upgrade bind-export-develUpgrade bind-license | Nov 19, 2019 | Oct 9, 2019 |
| Oracle Solaris | — | Upgrade network/dns/bind to version 9.11.8.0.0-11.4.12.0.1.2.0 on Solaris 11.4Upgrade service/network/dns/bind to version 9.11.8.0.0-11.4.12.0.1.2.0 on Solaris 11.4 | Aug 21, 2019 | Aug 21, 2019 |
| Oracle_linux | — | Upgrade bind-develUpgrade bind-libs-liteUpgrade bind-export-develUpgrade bind-pkcs11-utilsUpgrade bind-export-libsUpgrade bind-pkcs11-develUpgrade bind-licenseUpgrade bindUpgrade bind-sdb-chrootUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-lite-develUpgrade bind-pkcs11Upgrade bind-sdbUpgrade bind-pkcs11-libsUpgrade bind-libsUpgrade python3-bind | Jul 22, 2024 | Jun 19, 2019 |
| Redhat_linux | — | Upgrade bind-sdbUpgrade bind-utilsUpgrade bind-develUpgrade bind-chrootUpgrade bindUpgrade bind-utils-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-lite-develUpgrade bind-export-libsUpgrade bind-pkcs11Upgrade bind-libsUpgrade bind-debugsourceUpgrade bind-export-libs-debuginfoUpgrade bind-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bind-libs-liteUpgrade bind-sdb-chrootUpgrade bind-export-develUpgrade bind-pkcs11-libsUpgrade bind-sdb-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-pkcs11-develUpgrade bind-licenseUpgrade python3-bindUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-libs-debuginfo | Jul 11, 2019 | Jul 9, 2019 |
| Suse | — | Upgrade libisc1606Upgrade libisccfg160Upgrade libbind9-160Upgrade liblwres160Upgrade libisccc160Upgrade libbind9-1600Upgrade bindUpgrade libdns169-32bitUpgrade python-bindUpgrade libdns1605Upgrade liblwres160-32bitUpgrade bind-docUpgrade libdns169Upgrade libns1604Upgrade libisccc1600Upgrade libisc166Upgrade libbind9-160-32bitUpgrade libisccfg160-32bitUpgrade libirs160-32bitUpgrade python3-bindUpgrade bind-lwresdUpgrade libirs-develUpgrade bind-develUpgrade libisccc160-32bitUpgrade libirs160Upgrade bind-chrootenvUpgrade libisccfg1600Upgrade libirs1601Upgrade bind-devel-32bitUpgrade libisc166-32bitUpgrade bind-utils | Oct 2, 2019 | Jun 20, 2019 |
| Ubuntu | — | Upgrade bind9 | Jun 20, 2019 | Jun 20, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub