ISC BIND 9 is prone to a remote cache-poisoning vulnerability. An attacker may leverage this issue to manipulate cache data, potentially facilitating man-in-the-middle, site-impersonation, or denial-of- service attacks. Versions prior to the following are vulnerable: BIND 9.4.3-P4 BIND 9.5.2-P1 BIND 9.6.1-P2

Updates are available. Please see the references for details.

• http://www.isc.org/products/BIND/
• http://www.securityfocus.com/bid/37118

---

Updated on 2017-03-28