In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the server receiving the TSIG-signed request, could send a truncated response to that request, triggering an assertion failure, causing the server to exit. Alternately, an off-path attacker would have to correctly guess when a TSIG-signed request was sent, along with other characteristics of the packet and message, and spoof a truncated response to trigger an assertion failure, causing the server to exit.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Aug 22, 2024 | Aug 21, 2020 |
| Amazon Linux Ami 2 | — | Upgrade bind-export-libsUpgrade bind-debuginfoUpgrade bind-sdbUpgrade bind-chrootUpgrade bind-lite-develUpgrade bind-export-develUpgrade bindUpgrade bind-utilsUpgrade bind-sdb-chrootUpgrade bind-libs-liteUpgrade bind-pkcs11-develUpgrade bind-develUpgrade bind-libsUpgrade bind-pkcs11Upgrade bind-licenseUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-utils | Dec 10, 2020 | Aug 21, 2020 |
| Amazon_linux | — | Upgrade bind | Dec 19, 2020 | Aug 21, 2020 |
| Centos_linux | — | Upgrade bind-debugsourceUpgrade bind-export-develUpgrade bind-pkcs11-develUpgrade bind-export-libsUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-sdbUpgrade bind-licenseUpgrade bind-libs-lite-debuginfoUpgrade bind-sdb-debuginfoUpgrade bind-utilsUpgrade python3-bindUpgrade bind-sdb-chrootUpgrade bind-chrootUpgrade bind-libs-liteUpgrade bind-export-libs-debuginfoUpgrade bind-develUpgrade bind-debuginfoUpgrade bind-pkcs11Upgrade bind-libsUpgrade bind-pkcs11-utilsUpgrade bindUpgrade bind-lite-devel | Oct 9, 2020 | Aug 21, 2020 |
| Debian | — | Upgrade bind9 | Aug 31, 2020 | Aug 21, 2020 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Sep 8, 2020 | Aug 21, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 27, 2020 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Aug 31, 2020 | Aug 21, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bind-utilsUpgrade bind-chrootUpgrade bindUpgrade bind-pkcs11Upgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade bind-libsUpgrade bind-licenseUpgrade bind-pkcs11-libs | Nov 3, 2020 | Aug 21, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade bind-utilsUpgrade bind-pkcs11-utilsUpgrade bind-chrootUpgrade bind-libs-liteUpgrade bindUpgrade bind-pkcs11-libsUpgrade bind-pkcs11Upgrade bind-libsUpgrade bind-license | Sep 28, 2020 | Aug 21, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade bind-pkcs11Upgrade bind-libs-liteUpgrade bind-pkcs11-utilsUpgrade bind-licenseUpgrade bind-chrootUpgrade bind-pkcs11-libsUpgrade bind-utilsUpgrade bindUpgrade bind-libs | Nov 2, 2020 | Aug 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bindUpgrade python3-bindUpgrade bind-pkcs11Upgrade bind-licenseUpgrade bind-pkcs11-utilsUpgrade bind-libsUpgrade bind-export-develUpgrade bind-libs-liteUpgrade bind-export-libsUpgrade bind-utilsUpgrade bind-pkcs11-libsUpgrade bind-chroot | Aug 31, 2020 | Aug 21, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade bind-export-libsUpgrade bindUpgrade bind-pkcs11Upgrade bind-libsUpgrade bind-utilsUpgrade bind-chrootUpgrade python3-bindUpgrade bind-libs-lite | Oct 13, 2020 | Aug 21, 2020 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory18 | Dec 21, 2020 | Aug 21, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade service/network/dns/bind to version 9.11.22.0.0-11.4.26.0.1.75.1 on Solaris 11.4Upgrade network/dns/bind to version 9.11.22.0.0-11.4.26.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | Aug 21, 2020 |
| Oracle_linux | — | Upgrade bind-licenseUpgrade bind-pkcs11-develUpgrade bindUpgrade bind-develUpgrade bind-export-develUpgrade bind-libsUpgrade bind-pkcs11Upgrade bind-sdbUpgrade bind-sdb-chrootUpgrade bind-utilsUpgrade bind-libs-liteUpgrade bind-chrootUpgrade bind-pkcs11-utilsUpgrade python3-bindUpgrade bind-pkcs11-libsUpgrade bind-export-libsUpgrade bind-lite-devel | Oct 9, 2020 | Aug 20, 2020 |
| Redhat_linux | — | Upgrade bind-export-develUpgrade bind-libs-liteUpgrade bind-lite-develUpgrade bind-debugsourceUpgrade bind-export-libsNo solution existsUpgrade bind-sdbUpgrade bind-utilsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-sdb-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-sdb-chrootUpgrade bind-chrootUpgrade bind-pkcs11-libsUpgrade bind-export-libs-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-debuginfoUpgrade bind-licenseUpgrade bind-libs-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bindUpgrade bind-pkcs11-develUpgrade bind-develUpgrade bind-libsUpgrade bind-pkcs11-libs-debuginfoUpgrade python3-bindUpgrade bind-pkcs11 | Oct 9, 2020 | Aug 21, 2020 |
| Suse | — | Upgrade sysuser-shadowUpgrade libirs1601-32bitUpgrade libbind9-1600Upgrade libisccc161Upgrade python-bindUpgrade libdns1110Upgrade bind-docUpgrade libisc1606Upgrade libisc1107-32bitUpgrade libisccc1600-32bitUpgrade bind-libs-32bitUpgrade bindUpgrade libuv1-32bitUpgrade libirs-develUpgrade bind-devel-32bitUpgrade libns1604-32bitUpgrade libirs161Upgrade libisccfg1600-32bitUpgrade libisc1107Upgrade bind-utilsUpgrade libdns1605Upgrade libisccfg163Upgrade libisc1606-32bitUpgrade libbind9-161Upgrade libisccc1600Upgrade liblwres161Upgrade bind-chrootenvUpgrade libbind9-1600-32bitUpgrade python3-bindUpgrade bind-develUpgrade libns1604Upgrade libirs1601Upgrade libisccfg1600Upgrade libuv1Upgrade libdns1605-32bitUpgrade libuv-develUpgrade sysuser-toolsUpgrade bind-libs | Oct 14, 2020 | Aug 21, 2020 |
| Ubuntu | — | Upgrade bind9Upgrade bind9 (Ubuntu Pro) | Aug 22, 2020 | Aug 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub