A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Nov 8, 2019 | Oct 9, 2019 |
| Centos_linux | — | Upgrade bind-pkcs11-utilsUpgrade bind-debuginfoUpgrade bind-sdb-chrootUpgrade bind-lite-develUpgrade bind-develUpgrade bind-pkcs11-libsUpgrade bind-libsUpgrade python3-bindUpgrade bind-export-libs-debuginfoUpgrade bind-sdb-debuginfoUpgrade bind-chrootUpgrade bind-libs-debuginfoUpgrade bind-libs-liteUpgrade bind-pkcs11Upgrade bindUpgrade bind-libs-lite-debuginfoUpgrade bind-utilsUpgrade bind-licenseUpgrade bind-pkcs11-debuginfoUpgrade bind-sdbUpgrade bind-export-develUpgrade bind-utils-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-export-libsUpgrade bind-pkcs11-develUpgrade bind-debugsource | Aug 28, 2019 | Jul 9, 2019 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Oct 9, 2019 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jun 27, 2019 | Jun 27, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 23, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bind-libsUpgrade bind-export-libsUpgrade bindUpgrade bind-licenseUpgrade bind-pkcs11-utilsUpgrade bind-export-develUpgrade bind-pkcs11Upgrade python3-bindUpgrade bind-chrootUpgrade bind-pkcs11-libsUpgrade bind-libs-liteUpgrade bind-utils | Nov 19, 2019 | Oct 9, 2019 |
| Oracle Solaris | — | Upgrade service/network/dns/bind to version 9.11.8.0.0-11.4.12.0.1.2.0 on Solaris 11.4Upgrade network/dns/bind to version 9.11.8.0.0-11.4.12.0.1.2.0 on Solaris 11.4 | Aug 21, 2019 | Aug 21, 2019 |
| Oracle_linux | — | Upgrade bind-pkcs11-utilsUpgrade bind-pkcs11-develUpgrade bind-licenseUpgrade bind-develUpgrade bind-export-develUpgrade bind-libs-liteUpgrade bindUpgrade bind-sdb-chrootUpgrade bind-export-libsUpgrade bind-lite-develUpgrade bind-utilsUpgrade bind-sdbUpgrade bind-chrootUpgrade bind-pkcs11Upgrade bind-pkcs11-libsUpgrade bind-libsUpgrade python3-bind | Jul 22, 2024 | Jun 19, 2019 |
| Redhat_linux | — | Upgrade bind-chrootUpgrade bind-export-libs-debuginfoUpgrade bind-utilsUpgrade bind-libs-liteUpgrade bindUpgrade bind-lite-develUpgrade bind-pkcs11-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-debugsourceUpgrade bind-pkcs11-utilsUpgrade bind-export-libsUpgrade bind-sdbUpgrade bind-libs-lite-debuginfoUpgrade bind-develUpgrade bind-libsUpgrade bind-pkcs11Upgrade bind-debuginfoUpgrade bind-pkcs11-develUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-libs-debuginfoUpgrade python3-bindUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-licenseUpgrade bind-sdb-chrootUpgrade bind-export-develUpgrade bind-sdb-debuginfo | Jul 11, 2019 | Jul 9, 2019 |
| Suse | — | Upgrade python3-bindUpgrade libisccfg1600Upgrade bind-devel-32bitUpgrade libbind9-160-32bitUpgrade python-bindUpgrade libirs160-32bitUpgrade bind-develUpgrade bind-chrootenvUpgrade libdns1605Upgrade libirs1601Upgrade bind-docUpgrade libisccc160-32bitUpgrade liblwres160-32bitUpgrade bind-utilsUpgrade libdns169Upgrade libisccfg160-32bitUpgrade libisc166Upgrade bind-lwresdUpgrade libisc166-32bitUpgrade libns1604Upgrade libirs160Upgrade libisccc1600Upgrade libirs-develUpgrade libdns169-32bitUpgrade bindUpgrade libisccfg160Upgrade libbind9-1600Upgrade libisccc160Upgrade libisc1606Upgrade liblwres160Upgrade libbind9-160 | Oct 2, 2019 | Jun 20, 2019 |
| Ubuntu | — | Upgrade bind9 | Jun 20, 2019 | Jun 20, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub