Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CHAOS` or `HESIOD`, or DNS messages that specify meta-classes (`ANY` or `NONE`) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (`UPDATE`), zone change notifications (`NOTIFY`), or processing of `IN`-specific record types in non-`IN` data — can cause assertion failures in `named`. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-lite-develUpgrade bind-libsUpgrade bind9.16Upgrade bind-docUpgrade bind-chrootUpgrade bind9.18-dnssec-utilsUpgrade bind9.16-develUpgrade bind-sdbUpgrade bind-libs-liteUpgrade python3-bind9.16Upgrade bind-dnssec-docUpgrade bind9.18-chrootUpgrade bind9.18-docUpgrade bind-utilsUpgrade bind-pkcs11-libsUpgrade bind9.16-chrootUpgrade bind-develUpgrade bind9.16-licenseUpgrade bind9.18-utilsUpgrade bind9.18-develUpgrade bind9.16-libsUpgrade bind9.18Upgrade bind9.16-utilsUpgrade bind9.16-docUpgrade bind-licenseUpgrade python3-bindUpgrade bind-export-libsUpgrade bindUpgrade bind-sdb-chrootUpgrade bind-pkcs11Upgrade bind9.18-libsUpgrade bind9.16-dnssec-utilsUpgrade bind-export-develUpgrade bind-pkcs11-develUpgrade bind-dnssec-utilsUpgrade bind-pkcs11-utils | Jun 7, 2026 | Jun 4, 2026 |
| Alpine Linux | — | Upgrade bind | May 25, 2026 | May 20, 2026 |
| Amazon Linux Ami 2 | — | Upgrade bind-sdb-chrootUpgrade bind-export-libsUpgrade bindUpgrade bind-pkcs11-develUpgrade bind-licenseUpgrade bind-export-develUpgrade bind-debuginfoUpgrade bind-pkcs11Upgrade bind-sdbUpgrade bind-pkcs11-utilsUpgrade bind-lite-develUpgrade bind-utilsUpgrade bind-develUpgrade bind-libs-liteUpgrade bind-chrootUpgrade bind-libsUpgrade bind-pkcs11-libs | Jun 9, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade bindUpgrade bind-licenseUpgrade bind-libsUpgrade bind-utils-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-debugsourceUpgrade bind-chrootUpgrade bind-docUpgrade bind-debuginfoUpgrade bind-utilsUpgrade bind-devel | May 28, 2026 | May 20, 2026 |
| Debian | — | Upgrade bind9 | May 24, 2026 | May 24, 2026 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory30 | Jun 29, 2026 | Jun 29, 2026 |
| Oracle_linux | — | Upgrade bind9.16-libsUpgrade bind-pkcs11-utilsUpgrade python3-bindUpgrade bind-export-libsUpgrade bind9.16-docUpgrade bind-develUpgrade bind-chrootUpgrade bind-libs-liteUpgrade bind9.16-develUpgrade bind-utilsUpgrade bind-pkcs11-libsUpgrade bind-lite-develUpgrade bind-sdbUpgrade bind9.16-dnssec-utilsUpgrade bind-pkcs11-develUpgrade bind9.16Upgrade bind-export-develUpgrade bind9.16-utilsUpgrade bind-sdb-chrootUpgrade bindUpgrade bind-licenseUpgrade bind-libsUpgrade bind9.16-chrootUpgrade bind-pkcs11Upgrade python3-bind9.16Upgrade bind9.16-license | Jun 8, 2026 | May 20, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Sep 11, 2026 | May 21, 2026 |
| Redhat_linux | — | No solution existsUpgrade bind-lite-develUpgrade bind-pkcs11-debuginfoUpgrade bind9.16-libsUpgrade bind-pkcs11-utilsUpgrade bind9.16-debugsourceUpgrade bind-libs-lite-debuginfoUpgrade bind-dnssec-docUpgrade bind9.16-develUpgrade bind9.18-dnssec-utilsUpgrade bind-debuginfoUpgrade bind-libs-liteUpgrade bind9.18-debuginfoUpgrade bind-export-libsUpgrade bind9.16-docUpgrade bind9.18-utils-debuginfoUpgrade bind-chrootUpgrade bind9.18-debugsourceUpgrade bind-develUpgrade bind-dnssec-utilsUpgrade bind9.18-chrootUpgrade bind9.18-develUpgrade bind9.18-docUpgrade bind-sdbUpgrade bind-sdb-chrootUpgrade python3-bindUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-pkcs11-libsUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind-utilsUpgrade bind-libs-debuginfoUpgrade bindUpgrade bind9.16-libs-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind9.16-utilsUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-pkcs11-develUpgrade bind9.18-libsUpgrade bind9.18-libs-debuginfoUpgrade bind-export-develUpgrade bind-sdb-debuginfoUpgrade bind9.16-chrootUpgrade bind-debugsourceUpgrade python3-bind9.16Upgrade bind-pkcs11-utils-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade bind-licenseUpgrade bind-docUpgrade bind9.16Upgrade bind-libsUpgrade bind9.16-licenseUpgrade bind9.16-debuginfoUpgrade bind9.18-utilsUpgrade bind-pkcs11Upgrade bind9.18Upgrade bind-export-libs-debuginfo | Jun 8, 2026 | May 21, 2026 |
| Rocky_linux | — | Upgrade bind9.18Upgrade bind9.18-dnssec-utils-debuginfoUpgrade bind-utils-debuginfoUpgrade bind9.18-develUpgrade bind-sdbUpgrade bind-dnssec-utilsUpgrade bind-export-libsUpgrade bind-pkcs11-debuginfoUpgrade bind-chrootUpgrade bind-export-develUpgrade bind-pkcs11-utilsUpgrade bind-sdb-debuginfoUpgrade bind-lite-develUpgrade bind9.16-libsUpgrade bind9.18-chrootUpgrade bind-libs-lite-debuginfoUpgrade bind-utilsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-libs-liteUpgrade bind-sdb-chrootUpgrade bindUpgrade bind-debugsourceUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-debuginfoUpgrade bind-pkcs11Upgrade bind9.16-dnssec-utilsUpgrade bind-pkcs11-libs-debuginfoUpgrade bind9.16-develUpgrade bind9.16-debugsourceUpgrade bind9.16-chrootUpgrade bind9.16-debuginfoUpgrade bind9.18-debugsourceUpgrade bind9.18-libsUpgrade bind-export-libs-debuginfoUpgrade bind9.18-utilsUpgrade bind9.18-libs-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind9.16Upgrade bind-dnssec-utils-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade bind-libsUpgrade bind-develUpgrade bind9.18-utils-debuginfoUpgrade bind9.16-utilsUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-devel | Jun 8, 2026 | Jun 6, 2026 |
| Ubuntu | — | Upgrade bind9Upgrade bind9 (Ubuntu Pro) | May 25, 2026 | May 21, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 17, 2026 | May 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub