The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Bind | — | Apply OS X security update 2009-002Upgrade macOS to the latest version | Dec 16, 2011 | Jan 7, 2009 |
| Centos_linux | — | Upgrade bind-libbind-develUpgrade bindUpgrade bind-sdbUpgrade caching-nameserverUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-libsUpgrade bind-devel | Dec 1, 2016 | Jan 7, 2009 |
| Debian | — | Upgrade bind9 | Jul 30, 2024 | Jan 7, 2009 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 25, 2013 |
| Gentoo Linux | — | Upgrade net-dns/bind. | Oct 30, 2017 | Jan 7, 2009 |
| Ibm Aix | — | Apply the fix or workaround for bind9_advisory3 | Nov 30, 2017 | Jan 7, 2009 |
| Oracle_linux | — | Upgrade bind-sdbUpgrade bindUpgrade bind-develUpgrade bind-utilsUpgrade bind-libbind-develUpgrade bind-chrootUpgrade caching-nameserverUpgrade bind-libs | Oct 16, 2024 | Jan 7, 2009 |
| Suse | — | Upgrade bind-utils-64bitUpgrade bind-utilsUpgrade bind-libs-32bitUpgrade bind-docUpgrade bindUpgrade bind-utils-x86Upgrade bind-chrootenvUpgrade bind-utils-32bitUpgrade bind-devel-64bitUpgrade bind-libsUpgrade bind-develUpgrade bind-libs-64bit | Feb 17, 2015 | Jan 7, 2009 |
| Ubuntu | — | Upgrade libdns21Upgrade libdns43Upgrade libdns32Upgrade libdns35 | Nov 8, 2024 | Jan 7, 2009 |
| Vmsa 2009 0004 | — | Upgrade VMware ESX 3.5 to build number 158874 | Nov 19, 2010 | Jan 7, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub