buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-bind | Aug 30, 2017 | Sep 28, 2016 | |
| Amazon_linux | — | amazon-linux-upgrade-bind | Sep 28, 2016 | Sep 28, 2016 |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Sep 28, 2016 | |
| Centos_linux | — | centos-upgrade-bindcentos-upgrade-bind-chrootcentos-upgrade-bind-develcentos-upgrade-bind-libscentos-upgrade-bind-libs-litecentos-upgrade-bind-licensecentos-upgrade-bind-lite-develcentos-upgrade-bind-pkcs11centos-upgrade-bind-pkcs11-develcentos-upgrade-bind-pkcs11-libscentos-upgrade-bind-pkcs11-utilscentos-upgrade-bind-sdbcentos-upgrade-bind-sdb-chrootcentos-upgrade-bind-utilscentos-upgrade-bind97centos-upgrade-bind97-chrootcentos-upgrade-bind97-develcentos-upgrade-bind97-libscentos-upgrade-bind97-utils | Oct 21, 2016 | Sep 28, 2016 |
| Debian | debian-upgrade-bind9 | Sep 28, 2016 | Sep 27, 2016 | |
| Dns Bind | upgrade-isc-bind-latest | Oct 12, 2016 | Sep 28, 2016 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Sep 27, 2016 | |
| Freebsd | freebsd-upgrade-package-bind99freebsd-upgrade-package-bind910freebsd-upgrade-package-bind911freebsd-upgrade-package-bind9-develfreebsd-upgrade-base-9_3-release-p48 | Nov 14, 2016 | Sep 28, 2016 | |
| Gentoo Linux | gentoo-linux-upgrade-net-dns-bind | Oct 30, 2017 | Sep 28, 2016 | |
| Hpux | — | hpux-update-nameservice-bind-auxhpux-update-nameservice-bind-run | Aug 11, 2017 | Sep 28, 2016 |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-bindhuawei-euleros-2_0_sp1-upgrade-bind-chroothuawei-euleros-2_0_sp1-upgrade-bind-libshuawei-euleros-2_0_sp1-upgrade-bind-libs-litehuawei-euleros-2_0_sp1-upgrade-bind-licensehuawei-euleros-2_0_sp1-upgrade-bind-utils | Nov 30, 2017 | Sep 28, 2016 | |
| Ibm Aix | ibm-aix-bind_advisory13 | Nov 30, 2017 | Sep 28, 2016 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-network-dns-bind-9-6-3-11-8-0-175-3-14-0-2-0oracle-solaris-11-3-upgrade-service-network-dns-bind-9-6-3-11-8-0-175-3-14-0-2-0 | May 29, 2017 | Sep 28, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-bindoracle-linux-upgrade-bind97oracle-linux-upgrade-bind97-chrootoracle-linux-upgrade-bind97-develoracle-linux-upgrade-bind97-libsoracle-linux-upgrade-bind97-utilsoracle-linux-upgrade-bind-chrootoracle-linux-upgrade-bind-develoracle-linux-upgrade-bind-libbind-develoracle-linux-upgrade-bind-libsoracle-linux-upgrade-bind-libs-liteoracle-linux-upgrade-bind-licenseoracle-linux-upgrade-bind-lite-develoracle-linux-upgrade-bind-pkcs11oracle-linux-upgrade-bind-pkcs11-develoracle-linux-upgrade-bind-pkcs11-libsoracle-linux-upgrade-bind-pkcs11-utilsoracle-linux-upgrade-bind-sdboracle-linux-upgrade-bind-sdb-chrootoracle-linux-upgrade-bind-utilsoracle-linux-upgrade-caching-nameserver | Sep 28, 2016 | Sep 27, 2016 |
| Redhat_linux | — | redhat-upgrade-bindredhat-upgrade-bind-chrootredhat-upgrade-bind-debuginforedhat-upgrade-bind-develredhat-upgrade-bind-libbind-develredhat-upgrade-bind-libsredhat-upgrade-bind-libs-literedhat-upgrade-bind-licenseredhat-upgrade-bind-lite-develredhat-upgrade-bind-pkcs11redhat-upgrade-bind-pkcs11-develredhat-upgrade-bind-pkcs11-libsredhat-upgrade-bind-pkcs11-utilsredhat-upgrade-bind-sdbredhat-upgrade-bind-sdb-chrootredhat-upgrade-bind-utilsredhat-upgrade-bind97redhat-upgrade-bind97-chrootredhat-upgrade-bind97-debuginforedhat-upgrade-bind97-develredhat-upgrade-bind97-libsredhat-upgrade-bind97-utilsredhat-upgrade-caching-nameserver | Oct 21, 2016 | Sep 28, 2016 |
| Suse | — | suse-upgrade-bindsuse-upgrade-bind-chrootenvsuse-upgrade-bind-develsuse-upgrade-bind-devel-32bitsuse-upgrade-bind-docsuse-upgrade-bind-libssuse-upgrade-bind-libs-32bitsuse-upgrade-bind-libs-x86suse-upgrade-bind-utilssuse-upgrade-libbind9-160suse-upgrade-libbind9-1600suse-upgrade-libdns1605suse-upgrade-libdns169suse-upgrade-libirs-develsuse-upgrade-libirs160suse-upgrade-libirs1601suse-upgrade-libisc1606suse-upgrade-libisc166suse-upgrade-libisc166-32bitsuse-upgrade-libisccc160suse-upgrade-libisccc1600suse-upgrade-libisccfg160suse-upgrade-libisccfg1600suse-upgrade-liblwres160suse-upgrade-libns1604suse-upgrade-python-bindsuse-upgrade-python3-bind | Oct 12, 2016 | Sep 27, 2016 |
| Ubuntu | ubuntu-upgrade-bind9 | Sep 27, 2016 | Sep 27, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub