BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9.18.10, 9.19.0 through 9.19.8, and 9.16.12-S1 through 9.16.36-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bindUpgrade python3-bind9.16Upgrade bind9.16-docUpgrade bind9.16-utilsUpgrade bind-dnssec-utilsUpgrade bind-licenseUpgrade bind-utilsUpgrade bind9.16-libsUpgrade bind-docUpgrade bind9.16-chrootUpgrade bind9.16Upgrade bind9.16-dnssec-utilsUpgrade bind-develUpgrade python3-bindUpgrade bind-chrootUpgrade bind-libsUpgrade bind9.16-develUpgrade bind-dnssec-docUpgrade bind9.16-license | May 15, 2023 | Jan 26, 2023 |
| Alpine Linux | — | Upgrade bind | Aug 22, 2024 | Jan 25, 2023 |
| Amazon_linux_2023 | — | Upgrade bind-dlz-mysqlUpgrade bind-pkcs11-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-dnssec-docUpgrade bind-dnssec-utils-debuginfoUpgrade bind-dlz-sqlite3-debuginfoUpgrade python3-bindUpgrade bind-dlz-ldapUpgrade bind-dlz-ldap-debuginfoUpgrade bind-pkcs11-develUpgrade bind-utilsUpgrade bind-chrootUpgrade bind-pkcs11-libsUpgrade bind-libs-debuginfoUpgrade bind-dlz-filesystem-debuginfoUpgrade bind-develUpgrade bind-libsUpgrade bind-dnssec-utilsUpgrade bind-licenseUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-dlz-mysql-debuginfoUpgrade bind-dlz-sqlite3Upgrade bind-pkcs11-utilsUpgrade bind-dlz-filesystemUpgrade bind-pkcs11Upgrade bind-debuginfoUpgrade bindUpgrade bind-debugsource | Feb 17, 2025 | Jan 25, 2023 |
| Centos_linux | — | Upgrade bind-dnssec-docUpgrade bind-libsUpgrade bind9.16-libs-debuginfoUpgrade bind-debugsourceUpgrade bind-utilsUpgrade bindUpgrade bind-utils-debuginfoUpgrade bind9.16-debugsourceUpgrade bind-debuginfoUpgrade bind-chrootUpgrade python3-bind9.16Upgrade bind-dnssec-utilsUpgrade bind9.16-utilsUpgrade bind-dnssec-utils-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade bind9.16-licenseUpgrade bind9.16-chrootUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-licenseUpgrade python3-bindUpgrade bind9.16-utils-debuginfoUpgrade bind9.16-debuginfoUpgrade bind-libs-debuginfoUpgrade bind9.16-libsUpgrade bind9.16 | May 15, 2023 | Jan 26, 2023 |
| Debian | — | Upgrade bind9 | Jan 30, 2023 | Jan 26, 2023 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Mar 7, 2023 | Jan 26, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bind-chrootUpgrade bind-dnssec-utilsUpgrade bind-pkcs11-utilsUpgrade bind-dnssec-docUpgrade bind-pkcs11-libsUpgrade bind-utilsUpgrade python3-bindUpgrade bindUpgrade bind-libsUpgrade bind-pkcs11Upgrade bind-license | May 8, 2023 | Jan 26, 2023 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory23 | Jul 27, 2023 | Jan 26, 2023 |
| Oracle_linux | — | Upgrade bind9.16-docUpgrade bind9.16-licenseUpgrade bind-licenseUpgrade bind9.16-dnssec-utilsUpgrade python3-bindUpgrade bind9.16-utilsUpgrade python3-bind9.16Upgrade bind9.16-chrootUpgrade bind-docUpgrade bind-utilsUpgrade bind-dnssec-utilsUpgrade bind9.16-develUpgrade bind-develUpgrade bind-libsUpgrade bindUpgrade bind9.16-libsUpgrade bind-chrootUpgrade bind9.16Upgrade bind-dnssec-doc | May 18, 2023 | Jan 25, 2023 |
| Redhat_linux | — | Upgrade python3-bindUpgrade bind-dnssec-utils-debuginfoUpgrade bind9.16-licenseUpgrade bind-develUpgrade bind9.16Upgrade bind-dnssec-utilsUpgrade bind-licenseUpgrade bind9.16-libs-debuginfoUpgrade bind9.16-libsUpgrade bind9.16-debuginfoUpgrade bind-libs-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade python3-bind9.16Upgrade bind9.16-utilsUpgrade bind9.16-chrootUpgrade bind-debugsourceUpgrade bind-chrootUpgrade bind-docUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-libsUpgrade bind-dnssec-docUpgrade bind9.16-develUpgrade bind9.16-debugsourceUpgrade bindUpgrade bind-utils-debuginfoUpgrade bind-debuginfoUpgrade bind9.16-docUpgrade bind-utilsUpgrade bind9.16-utils-debuginfo | May 15, 2023 | Jan 26, 2023 |
| Suse | — | Upgrade bind-docUpgrade bind-utilsUpgrade python3-bindUpgrade bind | Feb 13, 2023 | Jan 26, 2023 |
| Ubuntu | — | Upgrade bind9 | Mar 22, 2023 | Jan 26, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub