In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the assertion failure, causing the server to exit.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Aug 22, 2024 | Aug 21, 2020 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Aug 21, 2020 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Sep 8, 2020 | Aug 21, 2020 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Aug 31, 2020 | Aug 21, 2020 |
| Oracle Solaris | — | Upgrade network/dns/bind to version 9.11.22.0.0-11.4.26.0.1.75.1 on Solaris 11.4Upgrade service/network/dns/bind to version 9.11.22.0.0-11.4.26.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | Aug 21, 2020 |
| Suse | — | Upgrade libuv1-32bitUpgrade libns1604-32bitUpgrade libirs1601-32bitUpgrade bind-utilsUpgrade libirs-develUpgrade bind-develUpgrade python3-bindUpgrade bind-devel-32bitUpgrade sysuser-toolsUpgrade libisccfg1600-32bitUpgrade sysuser-shadowUpgrade bind-chrootenvUpgrade libisccc1600-32bitUpgrade libisc1606-32bitUpgrade libuv1Upgrade libbind9-1600-32bitUpgrade libdns1605-32bitUpgrade libns1604Upgrade libisccfg1600Upgrade libdns1605Upgrade libisc1606Upgrade libbind9-1600Upgrade libuv-develUpgrade bind-docUpgrade bindUpgrade libirs1601Upgrade libisccc1600 | Oct 14, 2020 | Aug 21, 2020 |
| Ubuntu | — | Upgrade bind9 | Aug 22, 2020 | Aug 21, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub