The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that 'forward only' are not affected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Aug 22, 2024 | Aug 21, 2020 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Aug 21, 2020 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Sep 8, 2020 | Aug 21, 2020 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Aug 31, 2020 | Aug 21, 2020 |
| Oracle Solaris | — | Upgrade network/dns/bind to version 9.11.22.0.0-11.4.26.0.1.75.1 on Solaris 11.4Upgrade service/network/dns/bind to version 9.11.22.0.0-11.4.26.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | Aug 21, 2020 |
| Suse | — | Upgrade libuv-develUpgrade bind-docUpgrade libns1604Upgrade libuv1Upgrade libirs1601Upgrade libbind9-1600Upgrade libdns1605-32bitUpgrade libbind9-1600-32bitUpgrade libisc1606-32bitUpgrade python3-bindUpgrade libisc1606Upgrade libuv1-32bitUpgrade libirs1601-32bitUpgrade bind-devel-32bitUpgrade sysuser-shadowUpgrade bind-utilsUpgrade libns1604-32bitUpgrade libisccc1600Upgrade libisccfg1600Upgrade bind-develUpgrade bindUpgrade libisccc1600-32bitUpgrade bind-chrootenvUpgrade libdns1605Upgrade libirs-develUpgrade libisccfg1600-32bitUpgrade sysuser-tools | Oct 14, 2020 | Aug 21, 2020 |
| Ubuntu | — | Upgrade bind9 | Aug 22, 2020 | Aug 21, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub