18 October 2019
Multiple vulnerabilities were found in ISC BIND software. A remote attacker may bypass the validity checks to replace data in the mirror zone or send specially crafted queries to cause BIND to exit.
Successful exploitation could lead to spoofing, security restriction bypass or denial of service on an affected system.
Internet Systems Consortium (ISC) has released the following patches to solve the problems:
Administrators of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.