Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-chrootUpgrade bind-develUpgrade bind9.18-dnssec-utilsUpgrade python3-bindUpgrade bind-utilsUpgrade bind-dnssec-docUpgrade bind9.18-docUpgrade bind-libsUpgrade bind-dnssec-utilsUpgrade bind9.18-utilsUpgrade bind9.18-develUpgrade bind9.18Upgrade bind-docUpgrade bind9.18-chrootUpgrade bind9.18-libsUpgrade bindUpgrade bind-license | Nov 20, 2025 | Nov 10, 2025 |
| Alpine Linux | — | Upgrade bind | Oct 23, 2025 | Oct 22, 2025 |
| Amazon Linux Ami 2 | — | Upgrade bind-licenseUpgrade bind-pkcs11-develUpgrade bind-libsUpgrade bind-sdb-chrootUpgrade bind-develUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11-libsUpgrade bind-lite-develUpgrade bind-sdbUpgrade bind-export-libsUpgrade bindUpgrade bind-utilsUpgrade bind-pkcs11Upgrade bind-export-develUpgrade bind-debuginfoUpgrade bind-chrootUpgrade bind-libs-lite | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bind-dnssec-utilsUpgrade bind-libs-debuginfoUpgrade bind-docUpgrade bindUpgrade bind-utils-debuginfoUpgrade bind-debuginfoUpgrade bind-debugsourceUpgrade bind-licenseUpgrade bind-libsUpgrade bind-utilsUpgrade bind-dnssec-utils-debuginfoUpgrade bind-develUpgrade bind-chroot | Nov 6, 2025 | Oct 22, 2025 |
| Debian | — | Upgrade bind9 | Oct 27, 2025 | Oct 27, 2025 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 20, 2026 | Feb 20, 2026 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 7, 2025 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory29 | Feb 19, 2026 | Feb 18, 2026 |
| Oracle_linux | — | Upgrade bind-libsUpgrade bind9.18Upgrade bind9.18-develUpgrade bind-dnssec-utilsUpgrade bind9.18-utilsUpgrade bind9.18-libsUpgrade bind-licenseUpgrade bind-chrootUpgrade bind-docUpgrade bind-develUpgrade bindUpgrade bind9.18-dnssec-utilsUpgrade bind-utilsUpgrade bind9.18-chrootUpgrade bind9.18-doc | Nov 10, 2025 | Oct 22, 2025 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | Oct 22, 2025 |
| Redhat_linux | — | Upgrade bind9.18-develUpgrade bind9.18-utils-debuginfoUpgrade bind9.18Upgrade bind-dnssec-utilsUpgrade python3-bindUpgrade bind-libsUpgrade bind9.18-libs-debuginfoUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind9.18-utilsUpgrade bind9.18-debugsourceUpgrade bind-licenseUpgrade bind-develUpgrade bind-libs-debuginfoUpgrade bind-debuginfoUpgrade bind9.18-libsUpgrade bind9.18-debuginfoUpgrade bind9.18-docUpgrade bindUpgrade bind9.18-dnssec-utilsUpgrade bind-utilsUpgrade bind-dnssec-docUpgrade bind-dnssec-utils-debuginfoUpgrade bind-chrootUpgrade bind-docUpgrade bind9.18-chrootUpgrade bind-debugsourceUpgrade bind-utils-debuginfo | Nov 14, 2025 | Oct 22, 2025 |
| Rocky_linux | — | Upgrade bind9.18-debuginfoUpgrade bind-develUpgrade bind9.18-chrootUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-chrootUpgrade bind9.18-debugsourceUpgrade bind-utilsUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-utils-debuginfoUpgrade bindUpgrade bind9.18-utilsUpgrade bind9.18-libs-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-libs-debuginfoUpgrade bind9.18Upgrade bind-debugsourceUpgrade bind-utils-debuginfoUpgrade bind9.18-libsUpgrade bind-libsUpgrade bind9.18-devel | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade bind-utilsUpgrade bind-docUpgrade bind | Dec 5, 2025 | Nov 11, 2025 |
| Ubuntu | — | Upgrade bind9Upgrade bind9 (Ubuntu Pro) | Oct 23, 2025 | Oct 22, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Oct 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub