Risk: Medium
A DNS cache poisoning flaw has been found in BIND 8, caused by predictable outgoing DNS query identifiers being generated. BIND 8.x was retired at the end of August, mainly because of the large number of security flaws found in it. It was replaced by BIND 9 seven years ago and the latest version in use is BIND 9.4.1-P1.
The Internet Systems Consortium (ISC), which maintains BIND, recommends that all BIND 8.x users upgrade to BIND 9.4.1-P1 as a matter of urgency, in order to resolve the issue.