Description
openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted DNS response.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | bind | 9.10.3P4-21.1 | openSUSE-SU-2024:10467-1 |
Advisories 2
- openSUSE-SU-2024:10467-1 bind-9.10.3P4-21.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2025-1182 Internet Systems Consortium BIND: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · May 29, 2025
References
- APPLE-SA-2015-10-21-8 vendor-advisory
- https://kb.isc.org/article/AA-01438
- FEDORA-2015-14954 vendor-advisory
- https://support.apple.com/HT205376
- https://kc.mcafee.com/corporate/index?page=content&id=SB10134
- https://kb.isc.org/article/AA-01291
- https://kb.isc.org/article/AA-01307
- GLSA-201510-01 vendor-advisory
- 1033453 vdb-entry
- 76618 vdb-entry
- https://kb.isc.org/article/AA-01305
- https://kb.isc.org/article/AA-01306
- FEDORA-2015-14958 vendor-advisory
- https://security.netapp.com/advisory/ntap-20190730-0001/