| Package | Affected versions | Patched versions |
|---|---|---|
| bind | = 9.6= 9.6.0= 9.6.1= 9.6.2= 9.6.3= 9.7.0= 9.7.1= 9.7.2= 9.7.3= 9.7.4= 9.7.5= 9.7.6= 9.7.7= 9.8.0= 9.8.1= 9.8.2= 9.8.3= 9.8.4= 9.8.5= 9.8.6= 9.9.4 |
The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free