Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurred in an unusual order. Affects BIND 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0-P3, 9.11.1b1->9.11.1rc1, and 9.9.9-S8.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-bind | Jan 16, 2019 | Jan 16, 2019 | |
| Amazon_linux | — | amazon-linux-upgrade-bind | May 3, 2017 | Apr 12, 2017 |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jan 16, 2019 | |
| Centos_linux | — | centos-upgrade-bindcentos-upgrade-bind-chrootcentos-upgrade-bind-debuginfocentos-upgrade-bind-develcentos-upgrade-bind-libscentos-upgrade-bind-libs-litecentos-upgrade-bind-licensecentos-upgrade-bind-lite-develcentos-upgrade-bind-pkcs11centos-upgrade-bind-pkcs11-develcentos-upgrade-bind-pkcs11-libscentos-upgrade-bind-pkcs11-utilscentos-upgrade-bind-sdbcentos-upgrade-bind-sdb-chrootcentos-upgrade-bind-utils | Apr 20, 2017 | Apr 12, 2017 |
| Debian | debian-upgrade-bind9 | May 15, 2017 | Apr 12, 2017 | |
| Dns Bind | upgrade-isc-bind-latest | May 15, 2017 | May 15, 2017 | |
| Freebsd | freebsd-upgrade-package-bind99freebsd-upgrade-package-bind910freebsd-upgrade-package-bind911freebsd-upgrade-package-bind9-devel | Apr 13, 2017 | Apr 13, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-net-dns-bind | Oct 30, 2017 | Aug 17, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-bindhuawei-euleros-2_0_sp1-upgrade-bind-chroothuawei-euleros-2_0_sp1-upgrade-bind-libshuawei-euleros-2_0_sp1-upgrade-bind-libs-litehuawei-euleros-2_0_sp1-upgrade-bind-licensehuawei-euleros-2_0_sp1-upgrade-bind-utils | Oct 4, 2019 | Jan 16, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-bindhuawei-euleros-2_0_sp2-upgrade-bind-chroothuawei-euleros-2_0_sp2-upgrade-bind-libshuawei-euleros-2_0_sp2-upgrade-bind-libs-litehuawei-euleros-2_0_sp2-upgrade-bind-licensehuawei-euleros-2_0_sp2-upgrade-bind-pkcs11huawei-euleros-2_0_sp2-upgrade-bind-pkcs11-libshuawei-euleros-2_0_sp2-upgrade-bind-pkcs11-utilshuawei-euleros-2_0_sp2-upgrade-bind-utils | Oct 4, 2019 | Jan 16, 2019 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-network-dns-bind-9-10-6-1-0-0-175-3-35-0-3-0oracle-solaris-11-3-upgrade-service-network-dns-bind-9-10-6-1-0-0-175-3-35-0-3-0oracle-solaris-11-4-upgrade-entire-11-4-11-4-0-0-1-15-0 | Aug 24, 2018 | Aug 24, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-bindoracle-linux-upgrade-bind-chrootoracle-linux-upgrade-bind-develoracle-linux-upgrade-bind-libsoracle-linux-upgrade-bind-libs-liteoracle-linux-upgrade-bind-licenseoracle-linux-upgrade-bind-lite-develoracle-linux-upgrade-bind-pkcs11oracle-linux-upgrade-bind-pkcs11-develoracle-linux-upgrade-bind-pkcs11-libsoracle-linux-upgrade-bind-pkcs11-utilsoracle-linux-upgrade-bind-sdboracle-linux-upgrade-bind-sdb-chrootoracle-linux-upgrade-bind-utils | Apr 19, 2017 | Apr 12, 2017 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-bindredhat-upgrade-bind-chrootredhat-upgrade-bind-debuginforedhat-upgrade-bind-develredhat-upgrade-bind-libsredhat-upgrade-bind-libs-literedhat-upgrade-bind-licenseredhat-upgrade-bind-lite-develredhat-upgrade-bind-pkcs11redhat-upgrade-bind-pkcs11-develredhat-upgrade-bind-pkcs11-libsredhat-upgrade-bind-pkcs11-utilsredhat-upgrade-bind-sdbredhat-upgrade-bind-sdb-chrootredhat-upgrade-bind-utils | Apr 19, 2017 | Apr 12, 2017 | |
| Suse | — | suse-upgrade-bindsuse-upgrade-bind-chrootenvsuse-upgrade-bind-develsuse-upgrade-bind-devel-32bitsuse-upgrade-bind-docsuse-upgrade-bind-libssuse-upgrade-bind-libs-32bitsuse-upgrade-bind-libs-x86suse-upgrade-bind-utilssuse-upgrade-libbind9-160suse-upgrade-libbind9-1600suse-upgrade-libdns1605suse-upgrade-libdns169suse-upgrade-libirs-develsuse-upgrade-libirs160suse-upgrade-libirs1601suse-upgrade-libisc1606suse-upgrade-libisc166suse-upgrade-libisc166-32bitsuse-upgrade-libisccc160suse-upgrade-libisccc1600suse-upgrade-libisccfg160suse-upgrade-libisccfg1600suse-upgrade-liblwres160suse-upgrade-libns1604suse-upgrade-python-bindsuse-upgrade-python3-bind | Apr 13, 2017 | Apr 12, 2017 |
| Ubuntu | ubuntu-upgrade-bind9 | Apr 17, 2017 | Apr 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub