In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the server receiving the TSIG-signed request, could send a truncated response to that request, triggering an assertion failure, causing the server to exit. Alternately, an off-path attacker would have to correctly guess when a TSIG-signed request was sent, along with other characteristics of the packet and message, and spoof a truncated response to trigger an assertion failure, causing the server to exit.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-bind | Aug 22, 2024 | Aug 21, 2020 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-bindamazon-linux-ami-2-upgrade-bind-chrootamazon-linux-ami-2-upgrade-bind-debuginfoamazon-linux-ami-2-upgrade-bind-develamazon-linux-ami-2-upgrade-bind-export-develamazon-linux-ami-2-upgrade-bind-export-libsamazon-linux-ami-2-upgrade-bind-libsamazon-linux-ami-2-upgrade-bind-libs-liteamazon-linux-ami-2-upgrade-bind-licenseamazon-linux-ami-2-upgrade-bind-lite-develamazon-linux-ami-2-upgrade-bind-pkcs11amazon-linux-ami-2-upgrade-bind-pkcs11-develamazon-linux-ami-2-upgrade-bind-pkcs11-libsamazon-linux-ami-2-upgrade-bind-pkcs11-utilsamazon-linux-ami-2-upgrade-bind-sdbamazon-linux-ami-2-upgrade-bind-sdb-chrootamazon-linux-ami-2-upgrade-bind-utils | Dec 10, 2020 | Aug 21, 2020 | |
| Amazon_linux | — | amazon-linux-upgrade-bind | Dec 19, 2020 | Aug 21, 2020 |
| Centos_linux | — | centos-upgrade-bindcentos-upgrade-bind-chrootcentos-upgrade-bind-debuginfocentos-upgrade-bind-debugsourcecentos-upgrade-bind-develcentos-upgrade-bind-export-develcentos-upgrade-bind-export-libscentos-upgrade-bind-export-libs-debuginfocentos-upgrade-bind-libscentos-upgrade-bind-libs-debuginfocentos-upgrade-bind-libs-litecentos-upgrade-bind-libs-lite-debuginfocentos-upgrade-bind-licensecentos-upgrade-bind-lite-develcentos-upgrade-bind-pkcs11centos-upgrade-bind-pkcs11-debuginfocentos-upgrade-bind-pkcs11-develcentos-upgrade-bind-pkcs11-libscentos-upgrade-bind-pkcs11-libs-debuginfocentos-upgrade-bind-pkcs11-utilscentos-upgrade-bind-pkcs11-utils-debuginfocentos-upgrade-bind-sdbcentos-upgrade-bind-sdb-chrootcentos-upgrade-bind-sdb-debuginfocentos-upgrade-bind-utilscentos-upgrade-bind-utils-debuginfocentos-upgrade-python3-bind | Oct 9, 2020 | Aug 21, 2020 |
| Debian | debian-upgrade-bind9 | Aug 31, 2020 | Aug 21, 2020 | |
| Dns Bind | upgrade-isc-bind-latest | Sep 8, 2020 | Aug 21, 2020 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Aug 27, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-net-dns-bind | Aug 31, 2020 | Aug 21, 2020 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-bindhuawei-euleros-2_0_sp2-upgrade-bind-chroothuawei-euleros-2_0_sp2-upgrade-bind-libshuawei-euleros-2_0_sp2-upgrade-bind-libs-litehuawei-euleros-2_0_sp2-upgrade-bind-licensehuawei-euleros-2_0_sp2-upgrade-bind-pkcs11huawei-euleros-2_0_sp2-upgrade-bind-pkcs11-libshuawei-euleros-2_0_sp2-upgrade-bind-pkcs11-utilshuawei-euleros-2_0_sp2-upgrade-bind-utils | Nov 3, 2020 | Aug 21, 2020 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-bindhuawei-euleros-2_0_sp3-upgrade-bind-chroothuawei-euleros-2_0_sp3-upgrade-bind-libshuawei-euleros-2_0_sp3-upgrade-bind-libs-litehuawei-euleros-2_0_sp3-upgrade-bind-licensehuawei-euleros-2_0_sp3-upgrade-bind-pkcs11huawei-euleros-2_0_sp3-upgrade-bind-pkcs11-libshuawei-euleros-2_0_sp3-upgrade-bind-pkcs11-utilshuawei-euleros-2_0_sp3-upgrade-bind-utils | Sep 28, 2020 | Aug 21, 2020 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-bindhuawei-euleros-2_0_sp5-upgrade-bind-chroothuawei-euleros-2_0_sp5-upgrade-bind-libshuawei-euleros-2_0_sp5-upgrade-bind-libs-litehuawei-euleros-2_0_sp5-upgrade-bind-licensehuawei-euleros-2_0_sp5-upgrade-bind-pkcs11huawei-euleros-2_0_sp5-upgrade-bind-pkcs11-libshuawei-euleros-2_0_sp5-upgrade-bind-pkcs11-utilshuawei-euleros-2_0_sp5-upgrade-bind-utils | Nov 2, 2020 | Aug 21, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-bindhuawei-euleros-2_0_sp8-upgrade-bind-chroothuawei-euleros-2_0_sp8-upgrade-bind-export-develhuawei-euleros-2_0_sp8-upgrade-bind-export-libshuawei-euleros-2_0_sp8-upgrade-bind-libshuawei-euleros-2_0_sp8-upgrade-bind-libs-litehuawei-euleros-2_0_sp8-upgrade-bind-licensehuawei-euleros-2_0_sp8-upgrade-bind-pkcs11huawei-euleros-2_0_sp8-upgrade-bind-pkcs11-libshuawei-euleros-2_0_sp8-upgrade-bind-pkcs11-utilshuawei-euleros-2_0_sp8-upgrade-bind-utilshuawei-euleros-2_0_sp8-upgrade-python3-bind | Aug 31, 2020 | Aug 21, 2020 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-bindhuawei-euleros-2_0_sp9-upgrade-bind-chroothuawei-euleros-2_0_sp9-upgrade-bind-export-libshuawei-euleros-2_0_sp9-upgrade-bind-libshuawei-euleros-2_0_sp9-upgrade-bind-libs-litehuawei-euleros-2_0_sp9-upgrade-bind-pkcs11huawei-euleros-2_0_sp9-upgrade-bind-utilshuawei-euleros-2_0_sp9-upgrade-python3-bind | Oct 13, 2020 | Aug 21, 2020 | |
| Ibm Aix | ibm-aix-bind_advisory18 | Dec 21, 2020 | Aug 21, 2020 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Sep 19, 2022 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-network-dns-bind-9-11-22-0-0-11-4-26-0-1-75-1oracle-solaris-11-4-upgrade-service-network-dns-bind-9-11-22-0-0-11-4-26-0-1-75-1 | Jan 19, 2021 | Aug 21, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-bindoracle-linux-upgrade-bind-chrootoracle-linux-upgrade-bind-develoracle-linux-upgrade-bind-export-develoracle-linux-upgrade-bind-export-libsoracle-linux-upgrade-bind-libsoracle-linux-upgrade-bind-libs-liteoracle-linux-upgrade-bind-licenseoracle-linux-upgrade-bind-lite-develoracle-linux-upgrade-bind-pkcs11oracle-linux-upgrade-bind-pkcs11-develoracle-linux-upgrade-bind-pkcs11-libsoracle-linux-upgrade-bind-pkcs11-utilsoracle-linux-upgrade-bind-sdboracle-linux-upgrade-bind-sdb-chrootoracle-linux-upgrade-bind-utilsoracle-linux-upgrade-python3-bind | Oct 9, 2020 | Aug 20, 2020 |
| Redhat_linux | redhat-upgrade-bindredhat-upgrade-bind-chrootredhat-upgrade-bind-debuginforedhat-upgrade-bind-debugsourceredhat-upgrade-bind-develredhat-upgrade-bind-export-develredhat-upgrade-bind-export-libsredhat-upgrade-bind-export-libs-debuginforedhat-upgrade-bind-libsredhat-upgrade-bind-libs-debuginforedhat-upgrade-bind-libs-literedhat-upgrade-bind-libs-lite-debuginforedhat-upgrade-bind-licenseredhat-upgrade-bind-lite-develredhat-upgrade-bind-pkcs11redhat-upgrade-bind-pkcs11-debuginforedhat-upgrade-bind-pkcs11-develredhat-upgrade-bind-pkcs11-libsredhat-upgrade-bind-pkcs11-libs-debuginforedhat-upgrade-bind-pkcs11-utilsredhat-upgrade-bind-pkcs11-utils-debuginforedhat-upgrade-bind-sdbredhat-upgrade-bind-sdb-chrootredhat-upgrade-bind-sdb-debuginforedhat-upgrade-bind-utilsredhat-upgrade-bind-utils-debuginforedhat-upgrade-python3-bind | Oct 9, 2020 | Aug 21, 2020 | |
| Suse | — | suse-upgrade-bindsuse-upgrade-bind-chrootenvsuse-upgrade-bind-develsuse-upgrade-bind-devel-32bitsuse-upgrade-bind-docsuse-upgrade-bind-libssuse-upgrade-bind-libs-32bitsuse-upgrade-bind-utilssuse-upgrade-libbind9-1600suse-upgrade-libbind9-1600-32bitsuse-upgrade-libbind9-161suse-upgrade-libdns1110suse-upgrade-libdns1605suse-upgrade-libdns1605-32bitsuse-upgrade-libirs-develsuse-upgrade-libirs1601suse-upgrade-libirs1601-32bitsuse-upgrade-libirs161suse-upgrade-libisc1107suse-upgrade-libisc1107-32bitsuse-upgrade-libisc1606suse-upgrade-libisc1606-32bitsuse-upgrade-libisccc1600suse-upgrade-libisccc1600-32bitsuse-upgrade-libisccc161suse-upgrade-libisccfg1600suse-upgrade-libisccfg1600-32bitsuse-upgrade-libisccfg163suse-upgrade-liblwres161suse-upgrade-libns1604suse-upgrade-libns1604-32bitsuse-upgrade-libuv-develsuse-upgrade-libuv1suse-upgrade-libuv1-32bitsuse-upgrade-python-bindsuse-upgrade-python3-bindsuse-upgrade-sysuser-shadowsuse-upgrade-sysuser-tools | Oct 14, 2020 | Aug 21, 2020 |
| Ubuntu | ubuntu-pro-upgrade-bind9ubuntu-upgrade-bind9 | Aug 22, 2020 | Aug 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub