ISC BIND: multiple vulnerabilities | 09/18
HKCERT lists security issues in ISC BIND, with potential impacts including service disruption, compromised data integrity and security control bypass.
Basis: the headline or summary mentions a vulnerability, malware or a data incident; check applicability. GDMME follow-up priority uses official ratings and headline/summary rules. It is not a CVSS score or official vulnerability rating, and does not confirm that your business is affected.
Source severity
中度風險（HKCERT）
Affected scope
Scope listed in the advisory: BIND 9.11.0 to 9.18.50; BIND 9.18.0 to 9.18.50; BIND 9.20.0 to 9.20.27; BIND 9.21.0 to 9.21.25; BIND Supported Preview Edition 9.11.3-S1 to 9.18.50-S1; BIND Supported Preview Edition 9.20.9-S1 to 9.20.27-S1.
Official recommendations
Automatically extracted recommendation passages from the official source, retained in the source language. Check the complete advisory.
- 在安裝軟體之前 請先瀏覽供應商之網站 以獲得更多詳細資料
- 安裝供應商提供的修補程式：
- BIND 9.20.29 版本
- BIND 9.21.26 版本
- BIND Supported Preview Edition 9.20.29-S1 版本
The last successful extraction is used here. Check the official source for the latest content.
Source text collected (Hong Kong time)：2026/10/12 02:44 HKT
官方原文建議自動摘錄 未作逐篇人工分析或翻譯；請核對完整公告、現行版本及適用性
GDMME recommended actions
GDMME recommendations · automatically organised from explicit products and source signals, without individual human analysis. Confirm applicability against vendor guidance and your environment.
- A specific product or attack family could not be reliably identified for this entry. Read the original source and its vendor/research references to establish product, impact and response conditions; do not treat the headline as an applicability assessment.
- Compare products named by the original source with company software, device and supplier inventories. Have the service owner confirm actual use; gather missing facts before scheduling changes.
- Once the products named in the source applicability is confirmed, check the official excerpt and complete vendor patch/mitigation instructions. Record before/after versions, test results and rollback steps; do not install updates solely from a news headline.
Automatically organised (Hong Kong time)：2026/10/12 03:05 HKT
Educational information only. Confirm affected versions, mitigations and exploitation status with the original vendor advisory. Reports do not imply that GDMME equipment blocks every vulnerability.