Description
Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | bind | 9.16.20-1.4 | openSUSE-SU-2024:10650-1 |
Advisories 2
- openSUSE-SU-2024:10650-1 bind-9.16.20-1.4 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2025-1183 Internet Systems Consortium BIND: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · May 29, 2025
References
- 1034419 vdb-entry
- FEDORA-2015-09bf9e06ea vendor-advisory
- FEDORA-2015-2df40de264 vendor-advisory
- https://kb.isc.org/article/AA-01438
- 79347 vdb-entry
- https://kb.isc.org/article/AA-01380
- SSA:2015-349-01 vendor-advisory
- https://kb.isc.org/article/AA-01319