Description
ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause a denial of service (exit) via a type * (ANY) DNS query response that contains multiple RRsets, which triggers an assertion error, aka the "DNSSEC Validation" vulnerability.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | bind9 | 1:9.3.4-2 | — |
| Debian 13 | bind9 | 1:9.3.4-2 | — |
| Debian 12 | bind9 | 1:9.3.4-2 | — |
| Debian 3.1 | bind9 | 1:9.2.4-1sarge2 | DSA-1254-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | bind +7 | 30:9.3.3-8.el5 | RHSA-2007:0057 |
| RHEL 4 | bind +4 | 20:9.2.4-24.EL4 | RHSA-2007:0044 |
| RHEL 3 | bind +4 | 20:9.2.4-20.EL3 | RHSA-2007:0044 |
| RHEL 2 | bind +2 | 9.2.1-8.EL2 | RHSA-2007:0044 |
Advisories 3
- RHSA-2007:0057 Red Hat Security Advisory: bind security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0044 Red Hat Security Advisory: bind security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1254-1 bind9 Debian Security (DSA / DLA) · Mar 9, 2026
References
- SSRT061273 vendor-advisory
- 1017573 vdb-entry
- http://docs.info.apple.com/article.html?artnum=305530
- 20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player mailing-list
- 23944 third-party-advisory
- GLSA-200702-06 vendor-advisory
- 24129 third-party-advisory
- 102969 vendor-advisory
- 24048 third-party-advisory
- ADV-2007-1939 vdb-entry
- FreeBSD-SA-07:02 vendor-advisory
- SSRT071304 vendor-advisory
- OpenPKG-SA-2007.007 vendor-advisory
- ADV-2007-3229 vdb-entry
- NetBSD-SA2007-003 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2007-125.htm
- 23943 third-party-advisory
- MDKSA-2007:030 vendor-advisory
- 25482 third-party-advisory
- RHSA-2007:0057 vendor-advisory
- 2007-0005 vendor-advisory
- DSA-1254 vendor-advisory
- APPLE-SA-2007-05-24 vendor-advisory
- 25402 third-party-advisory
- bind-rrsets-dos(31838) vdb-entry
- 22231 vdb-entry
- 24083 third-party-advisory
- 25649 third-party-advisory
- RHSA-2007:0044 vendor-advisory
- 24284 third-party-advisory
- 24930 third-party-advisory
- IY96144 vendor-advisory
- 24648 third-party-advisory
- ADV-2007-2163 vdb-entry
- FEDORA-2007-164 vendor-advisory
- 25715 third-party-advisory
- 23977 third-party-advisory
- oval:org.mitre.oval:def:11523 vdb-entry signature
- [bind-announce] 20070125 Internet Systems Consortium Security Advisory. mailing-list
- http://www.isc.org/index.pl?/sw/bind/view/?release=9.2.8
- 26909 third-party-advisory
- ADV-2007-2002 vdb-entry
- http://www.isc.org/index.pl?/sw/bind/bind-security.php
- USN-418-1 vendor-advisory
- IY95619 vendor-advisory
- 24203 third-party-advisory
- 27706 third-party-advisory
- 24014 third-party-advisory
- 24054 third-party-advisory
- 23974 third-party-advisory
- ADV-2007-2315 vdb-entry
- ADV-2007-2245 vdb-entry
- SUSE-SA:2007:014 vendor-advisory
- https://issues.rpath.com/browse/RPL-989
- http://www.isc.org/index.pl?/sw/bind/view/?release=9.3.4
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488
- IY96324 vendor-advisory
- ADV-2007-1401 vdb-entry
- FEDORA-2007-147 vendor-advisory
- IY95618 vendor-advisory