Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind9.18-libsUpgrade bind9.18-develUpgrade bind9.18-chrootUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-docUpgrade bind9.18Upgrade bind9.18-utils | Feb 25, 2025 | Jan 29, 2025 |
| Alpine Linux | — | Upgrade bind | Aug 8, 2025 | Jan 29, 2025 |
| Amazon Linux Ami 2 | — | Upgrade bind-libs-liteUpgrade bind-export-libsUpgrade bind-chrootUpgrade bind-pkcs11Upgrade bind-debuginfoUpgrade bind-export-develUpgrade bind-sdbUpgrade bindUpgrade bind-licenseUpgrade bind-lite-develUpgrade bind-pkcs11-libsUpgrade bind-sdb-chrootUpgrade bind-develUpgrade bind-pkcs11-develUpgrade bind-utilsUpgrade bind-pkcs11-utilsUpgrade bind-libs | Feb 5, 2025 | Jan 29, 2025 |
| Amazon_linux_2023 | — | Upgrade bind-develUpgrade bind-utilsUpgrade bind-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-chrootUpgrade bind-debugsourceUpgrade bind-licenseUpgrade bind-utils-debuginfoUpgrade bind-libs-debuginfoUpgrade bindUpgrade bind-docUpgrade bind-dnssec-utils-debuginfoUpgrade bind-libs | Feb 17, 2025 | Jan 29, 2024 |
| Debian | — | Upgrade bind9 | Jan 31, 2025 | Jan 31, 2025 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 11, 2025 | Jan 29, 2025 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory28 | May 21, 2025 | Jan 29, 2025 |
| Oracle_linux | — | Upgrade bind9.18-docUpgrade bind9.18-chrootUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-develUpgrade bind9.18-libsUpgrade bind9.18Upgrade bind9.18-utils | Feb 25, 2025 | Jan 29, 2024 |
| Redhat Openshift | — | Upgrade rhcos | Mar 6, 2025 | Jan 29, 2024 |
| Redhat_linux | — | Upgrade bind9.18-utils-debuginfoUpgrade bind9.18-debugsourceUpgrade bind9.18-utilsUpgrade bind9.18-debuginfoUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-develUpgrade bind9.18-docUpgrade bind9.18-libsUpgrade bind9.18-chrootUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind9.18Upgrade bind9.18-libs-debuginfo | Feb 20, 2025 | Jan 29, 2025 |
| Rocky_linux | — | Upgrade bind9.18-chrootUpgrade bind9.18Upgrade bind9.18-libs-debuginfoUpgrade bind9.18-libsUpgrade bind9.18-debuginfoUpgrade bind9.18-utils-debuginfoUpgrade bind9.18-develUpgrade bind9.18-utilsUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-debugsourceUpgrade bind9.18-dnssec-utils-debuginfo | Mar 18, 2025 | Jan 29, 2025 |
| Suse | — | Upgrade bind-modules-ldapUpgrade bind-modules-sqlite3Upgrade bind-modules-genericUpgrade bindUpgrade bind-modules-perlUpgrade bind-docUpgrade bind-utilsUpgrade bind-modules-mysql | Dec 5, 2025 | May 30, 2025 |
| Ubuntu | — | Upgrade bind9 | Jan 30, 2025 | Jan 29, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub