Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure. This issue affects BIND 9 versions 9.16.13 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.33-S1 through 9.11.37-S1, 9.16.13-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind9.16Upgrade bind9.16-chrootUpgrade python3-bind9.16Upgrade bind9.16-develUpgrade bind-libsUpgrade bind9.16-dnssec-utilsUpgrade bind9.16-utilsUpgrade bind-chrootUpgrade bind-dyndb-ldapUpgrade bind-docUpgrade bind-develUpgrade bind9.16-docUpgrade bind-dnssec-utilsUpgrade bind9.16-licenseUpgrade bind-utilsUpgrade python3-bindUpgrade bind-licenseUpgrade bindUpgrade bind9.16-libsUpgrade bind-dnssec-doc | Aug 22, 2024 | Jul 23, 2024 |
| Alpine Linux | — | Upgrade bind | Aug 8, 2025 | Jul 23, 2024 |
| Amazon_linux_2023 | — | Upgrade bindUpgrade bind-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-dlz-filesystemUpgrade bind-dlz-mysql-debuginfoUpgrade bind-chrootUpgrade bind-dlz-sqlite3Upgrade bind-utils-debuginfoUpgrade bind-dlz-filesystem-debuginfoUpgrade bind-licenseUpgrade bind-debugsourceUpgrade bind-docUpgrade bind-utilsUpgrade bind-dlz-sqlite3-debuginfoUpgrade bind-libsUpgrade bind-libs-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-dlz-ldap-debuginfoUpgrade bind-develUpgrade bind-dlz-mysqlUpgrade bind-dlz-ldap | Feb 17, 2025 | Jul 23, 2024 |
| Debian | — | Upgrade bind9 | Jul 29, 2024 | Jul 23, 2024 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jul 24, 2024 | Jul 24, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bind-dnssec-docUpgrade bind-pkcs11-utilsUpgrade bind-libsUpgrade bind-pkcs11-libsUpgrade bind-pkcs11Upgrade bind-utilsUpgrade python3-bindUpgrade bindUpgrade bind-licenseUpgrade bind-dnssec-utilsUpgrade bind-chroot | Oct 9, 2024 | Jul 23, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bind-chrootUpgrade bind-pkcs11-utilsUpgrade bind-dnssec-utilsUpgrade bind-pkcs11-libsUpgrade bind-utilsUpgrade bind-dnssec-docUpgrade bind-libsUpgrade python3-bindUpgrade bind-licenseUpgrade bind-pkcs11Upgrade bind | Oct 9, 2024 | Jul 23, 2024 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory27 | Nov 19, 2024 | Jul 23, 2024 |
| Oracle_linux | — | Upgrade bind9.16Upgrade bind-develUpgrade bind-dnssec-docUpgrade bind-chrootUpgrade python3-bindUpgrade bind-utilsUpgrade bind9.16-utilsUpgrade bind9.16-develUpgrade bind-libsUpgrade bind-licenseUpgrade bindUpgrade bind9.16-docUpgrade bind9.16-dnssec-utilsUpgrade bind-docUpgrade bind9.16-licenseUpgrade bind9.16-libsUpgrade bind9.16-chrootUpgrade python3-bind9.16Upgrade bind-dnssec-utilsUpgrade bind-dyndb-ldap | Oct 16, 2024 | Jul 23, 2024 |
| Redhat Openshift | — | Upgrade rhcos | Sep 5, 2024 | Jul 23, 2024 |
| Redhat_linux | — | Upgrade bind-libsUpgrade bind9.16Upgrade bind-chrootUpgrade bind9.16-debugsourceUpgrade bind-dnssec-docUpgrade bind-libs-debuginfoUpgrade python3-bind9.16Upgrade bind-dnssec-utils-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind9.16-debuginfoUpgrade bind-utilsUpgrade bind9.16-libs-debuginfoUpgrade bind-develUpgrade python3-bindUpgrade bind-dyndb-ldapUpgrade bind9.16-utils-debuginfoUpgrade bind9.16-develUpgrade bind-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade bind-dnssec-utilsUpgrade bind9.16-utilsUpgrade bind-licenseUpgrade bind-utils-debuginfoUpgrade bind-debugsourceUpgrade bind-docUpgrade bind9.16-docUpgrade bindUpgrade bind9.16-libsUpgrade bind9.16-licenseUpgrade bind9.16-chrootUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-dyndb-ldap-debuginfo | Aug 22, 2024 | Jul 23, 2024 |
| Rocky_linux | — | Upgrade bind9.16-utils-debuginfoUpgrade bind9.16-utilsUpgrade bind9.16-develUpgrade bind9.16-debugsourceUpgrade bind-dyndb-ldap-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-libsUpgrade bind-utils-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind9.16Upgrade bind-dyndb-ldapUpgrade bind-dnssec-utils-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade bind9.16-chrootUpgrade bind-libs-debuginfoUpgrade bind9.16-debuginfoUpgrade bind-debugsourceUpgrade bind9.16-libsUpgrade bind-debuginfoUpgrade bindUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-dnssec-utilsUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-devel | Aug 22, 2024 | Jul 23, 2024 |
| Suse | — | Upgrade bind-modules-mysqlUpgrade bind-utilsUpgrade bind-modules-perlUpgrade bindUpgrade bind-modules-genericUpgrade bind-docUpgrade bind-modules-ldapUpgrade python3-bindUpgrade bind-modules-sqlite3 | Jul 31, 2024 | Jul 23, 2024 |
| Ubuntu | — | Upgrade bind9 | Jul 24, 2024 | Jul 23, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 23, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub