bind9 - Regression Update
Summary
DSA-5734-2: bind9 - regression update. Affects bind9 versions < 1:9.18.28-1~deb12u2. Fixed in 1:9.18.28-1~deb12u2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
bind9 is a DNS server software package used in the Debian ecosystem. It provides domain name resolution services and is a critical component of the internet infrastructure. The bind9 package in Debian version 12 is affected by a regression vulnerability.
Vulnerability Detail
The regression vulnerability in bind9 allows an attacker to exploit a flaw in the software, potentially leading to unauthorized access, denial of service, or other malicious activities. The vulnerability was introduced in version 0 of the package and has been fixed in version 1:9.18.28-1~deb12u2.
How To Fix
Minimum fixed version
1:9.18.28-1~deb12u2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade bind9Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The bind9 package in Debian version 12 is affected by a regression vulnerability. It is recommended to update the package to version 1:9.18.28-1~deb12u2 or later to fix the vulnerability.
See every vulnerability recorded for bind9 →
FAQ
bind9 is a DNS server software package used for domain name resolution.
The vulnerability can potentially lead to unauthorized access, denial of service, or other malicious activities.
You can use the Vulert playground at Vulert Scanner to check if your bind9 package is affected by this vulnerability.
Yes, the vulnerability has been fixed in bind9 version 1:9.18.28-1~deb12u2.
You can update your bind9 package by running the package manager update command or manually installing the updated package from the official Debian repository.
Related vulnerabilities
Recent vulnerabilities recorded for bind9.
