BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's default settings the vulnerable code path is not exposed, but a server can be rendered vulnerable by explicitly setting valid values for the tkey-gssapi-keytab or tkey-gssapi-credentialconfiguration options. Although the default configuration is not vulnerable, GSS-TSIG is frequently used in networks where BIND is integrated with Samba, as well as in mixed-server environments that combine BIND servers with Active Directory domain controllers. The most likely outcome of a successful exploitation of the vulnerability is a crash of the named process. However, remote code execution, while unproven, is theoretically possible. Affects: BIND 9.5.0 -> 9.11.27, 9.12.0 -> 9.16.11, and versions BIND 9.11.3-S1 -> 9.11.27-S1 and 9.16.8-S1 -> 9.16.11-S1 of BIND Supported Preview Edition. Also release versions 9.17.0 -> 9.17.1 of the BIND 9.17 development branch
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-develUpgrade bind-lite-develUpgrade bind-sdbUpgrade bind-chrootUpgrade bind-export-libsUpgrade bind-sdb-chrootUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11Upgrade bind-pkcs11-develUpgrade bind-export-develUpgrade bind | May 4, 2022 | Feb 17, 2021 |
| Alpine Linux | — | Upgrade bind | Aug 22, 2024 | Feb 17, 2021 |
| Amazon Linux Ami 2 | — | Upgrade bind-debuginfoUpgrade bind-develUpgrade bind-pkcs11-libsUpgrade bind-pkcs11Upgrade bind-libsUpgrade bindUpgrade bind-sdb-chrootUpgrade bind-pkcs11-utilsUpgrade bind-licenseUpgrade bind-export-develUpgrade bind-export-libsUpgrade bind-libs-liteUpgrade bind-sdbUpgrade bind-pkcs11-develUpgrade bind-lite-develUpgrade bind-utilsUpgrade bind-chroot | Mar 22, 2021 | Feb 17, 2021 |
| Amazon_linux | — | Upgrade bind | Mar 20, 2021 | Feb 17, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 17, 2021 |
| Centos_linux | — | Upgrade bind-utilsUpgrade bind-libs-liteUpgrade bind-pkcs11-libsUpgrade bind-lite-develUpgrade bind-chrootUpgrade bind-sdb-chrootUpgrade bind-export-libsUpgrade bind-pkcs11-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-licenseUpgrade bind-export-develUpgrade bind-pkcs11-develUpgrade bind-sdb-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-pkcs11Upgrade bind-debugsourceUpgrade bind-debuginfoUpgrade bindUpgrade bind-export-libs-debuginfoUpgrade bind-sdbUpgrade bind-libs-debuginfoUpgrade python3-bindUpgrade bind-libsUpgrade bind-develUpgrade bind-libs-lite-debuginfo | Mar 3, 2021 | Feb 17, 2021 |
| Debian | — | Upgrade bind9 | Feb 22, 2021 | Feb 17, 2021 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Mar 12, 2021 | Feb 17, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bind-libs-liteUpgrade bind-pkcs11-utilsUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-pkcs11-libsUpgrade bindUpgrade bind-licenseUpgrade bind-libsUpgrade bind-pkcs11 | Sep 16, 2021 | Feb 17, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade bind-licenseUpgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade bind-pkcs11Upgrade bind-utilsUpgrade bind-libsUpgrade bindUpgrade bind-pkcs11-libsUpgrade bind-chroot | Apr 30, 2021 | Feb 17, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade bind-licenseUpgrade bind-libsUpgrade bind-pkcs11Upgrade bindUpgrade bind-pkcs11-libsUpgrade bind-utilsUpgrade bind-libs-liteUpgrade bind-chrootUpgrade bind-pkcs11-utils | May 19, 2021 | Feb 17, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bind-libs-liteUpgrade bind-licenseUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11Upgrade bindUpgrade bind-libsUpgrade bind-pkcs11-libsUpgrade python3-bindUpgrade bind-export-libsUpgrade bind-utilsUpgrade bind-export-develUpgrade bind-chroot | May 18, 2021 | Feb 17, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade bindUpgrade bind-export-libsUpgrade bind-chrootUpgrade bind-libsUpgrade bind-pkcs11Upgrade bind-utilsUpgrade bind-libs-liteUpgrade python3-bind | Jun 2, 2021 | Feb 17, 2021 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 24, 2022 |
| Oracle Solaris | — | Upgrade network/dns/bind to version 9.11.28.0.0-11.4.31.0.1.88.2 on Solaris 11.4Upgrade service/network/dns/bind to version 9.11.28.0.0-11.4.31.0.1.88.2 on Solaris 11.4 | Mar 17, 2021 | Feb 17, 2021 |
| Oracle_linux | — | Upgrade bind-pkcs11-develUpgrade bind-export-libsUpgrade bindUpgrade bind-licenseUpgrade bind-pkcs11-utilsUpgrade bind-develUpgrade bind-libs-liteUpgrade bind-sdb-chrootUpgrade bind-export-develUpgrade bind-pkcs11Upgrade bind-chrootUpgrade python3-bindUpgrade bind-pkcs11-libsUpgrade bind-sdbUpgrade bind-libsUpgrade bind-lite-develUpgrade bind-utils | Mar 2, 2021 | Feb 17, 2021 |
| Redhat_linux | — | Upgrade bind-pkcs11Upgrade bind-lite-develUpgrade bind-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade bindUpgrade bind-sdbUpgrade bind-libs-lite-debuginfoUpgrade bind-libsUpgrade bind-utils-debuginfoUpgrade bind-chrootUpgrade bind-export-libs-debuginfoUpgrade bind-debugsourceUpgrade bind-export-develUpgrade bind-develUpgrade bind-pkcs11-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-sdb-debuginfoUpgrade bind-utilsUpgrade bind-sdb-chrootNo solution existsUpgrade bind-licenseUpgrade bind-pkcs11-develUpgrade bind-export-libsUpgrade bind-libs-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-libsUpgrade python3-bind | Mar 3, 2021 | Feb 17, 2021 |
| Suse | — | Upgrade libisc1107Upgrade libirs-develUpgrade bind-devel-32bitUpgrade libisccfg1600Upgrade libirs1601-32bitUpgrade bindUpgrade bind-chrootenvUpgrade libisccc1600Upgrade bind-utilsUpgrade libdns1605Upgrade libisc1606-32bitUpgrade libirs1601Upgrade bind-libs-32bitUpgrade libns1604Upgrade libbind9-161Upgrade bind-docUpgrade libisccfg1600-32bitUpgrade bind-develUpgrade libisc1107-32bitUpgrade libisccc1600-32bitUpgrade python-bindUpgrade libisccfg163Upgrade bind-libsUpgrade libirs161Upgrade libbind9-1600-32bitUpgrade libisc1606Upgrade libdns1110Upgrade liblwres161Upgrade libdns1605-32bitUpgrade libbind9-1600Upgrade libisccc161Upgrade python3-bindUpgrade libns1604-32bit | Feb 19, 2021 | Feb 17, 2021 |
| Ubuntu | — | Upgrade bind9Upgrade bind9 (Ubuntu Pro) | Feb 19, 2021 | Feb 17, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 17, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub