If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries). This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-licenseUpgrade bind-pkcs11-develUpgrade python3-bind9.16Upgrade bindUpgrade bind-sdbUpgrade bind9.18-chrootUpgrade bind9.16-chrootUpgrade bind9.18-utilsUpgrade bind9.16-utilsUpgrade bind-docUpgrade bind-libsUpgrade bind9.16-dnssec-utilsUpgrade bind9.16-develUpgrade bind9.16-docUpgrade bind-utilsUpgrade bind-export-develUpgrade bind9.18Upgrade python3-bindUpgrade bind-libs-liteUpgrade bind-develUpgrade bind-export-libsUpgrade bind-sdb-chrootUpgrade bind9.18-develUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-utilsUpgrade bind9.18-libsUpgrade bind9.16Upgrade bind9.16-licenseUpgrade bind-chrootUpgrade bind-dnssec-utilsUpgrade bind-dnssec-docUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-docUpgrade bind-lite-develUpgrade bind9.16-libsUpgrade bind-pkcs11 | Apr 16, 2026 | Apr 13, 2026 |
| Alpine Linux | — | Upgrade bind | Mar 27, 2026 | Mar 25, 2026 |
| Amazon Linux Ami 2 | — | Upgrade bind-sdb-chrootUpgrade bind-libsUpgrade bind-utilsUpgrade bind-develUpgrade bind-pkcs11Upgrade bind-pkcs11-develUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade bind-licenseUpgrade bind-debuginfoUpgrade bind-lite-develUpgrade bind-export-libsUpgrade bindUpgrade bind-export-develUpgrade bind-sdbUpgrade bind-chroot | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bind-develUpgrade bind-utilsUpgrade bind-libs-debuginfoUpgrade bind-chrootUpgrade bind-libsUpgrade bind-utils-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-licenseUpgrade bind-docUpgrade bind-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-debugsourceUpgrade bind | Apr 7, 2026 | Mar 25, 2026 |
| Debian | — | Upgrade bind9 | Mar 30, 2026 | Mar 30, 2026 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jul 30, 2026 | Jul 29, 2026 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory30 | Jun 29, 2026 | Jun 29, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | May 29, 2026 |
| Oracle_linux | — | Upgrade bind-dnssec-docUpgrade bind-utilsUpgrade bind-chrootUpgrade bind9.18-develUpgrade bind-export-libsUpgrade bind9.16-develUpgrade bind9.16-libsUpgrade bind-dnssec-utilsUpgrade bind-libs-liteUpgrade bind9.16-utilsUpgrade bind9.18-utilsUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-docUpgrade bind-pkcs11-develUpgrade bind-lite-develUpgrade bind-pkcs11-libsUpgrade bind-docUpgrade bind9.16-docUpgrade bindUpgrade bind9.16-licenseUpgrade python3-bindUpgrade bind9.18Upgrade bind-sdbUpgrade bind9.16-dnssec-utilsUpgrade bind-pkcs11Upgrade bind-sdb-chrootUpgrade bind-pkcs11-utilsUpgrade bind-libsUpgrade bind-licenseUpgrade bind-export-develUpgrade bind9.18-libsUpgrade bind-develUpgrade bind9.16-chrootUpgrade bind9.16Upgrade python3-bind9.16Upgrade bind9.18-chroot | Apr 22, 2026 | Mar 25, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | Mar 25, 2026 |
| Redhat_linux | — | Upgrade bind-dnssec-utilsUpgrade bind-chrootUpgrade bind9.16-debugsourceUpgrade bindUpgrade bind-dnssec-docUpgrade bind9.16-develUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind9.18-dnssec-utilsUpgrade bind-pkcs11-libsUpgrade bind-sdb-chrootUpgrade bind9.18-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind-export-libs-debuginfoUpgrade bind9.16-docUpgrade bind-lite-develUpgrade bind-libs-liteUpgrade bind-pkcs11Upgrade bind9.18-chrootUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind9.18-docUpgrade python3-bindUpgrade bind-sdbUpgrade bind-libs-lite-debuginfoUpgrade bind9.16-libsUpgrade bind9.18-utils-debuginfoUpgrade bind-debuginfoUpgrade bind-utilsUpgrade bind-debugsourceUpgrade bind-develUpgrade bind-pkcs11-utilsUpgrade bind-export-libsUpgrade bind9.16Upgrade bind9.16-dnssec-utilsUpgrade bind9.18-utilsUpgrade bind-export-develUpgrade bind-pkcs11-develUpgrade bind9.16-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-sdb-debuginfoUpgrade bind9.18-libsUpgrade bind9.16-licenseUpgrade bind9.16-utilsUpgrade bind9.18-develUpgrade bind9.16-chrootUpgrade bind9.16-utils-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-licenseUpgrade bind9.18-debugsourceUpgrade bind-docUpgrade bind-dnssec-utils-debuginfoUpgrade bind-libsUpgrade bind-pkcs11-libs-debuginfoUpgrade bind9.18Upgrade bind9.18-libs-debuginfoUpgrade python3-bind9.16 | Apr 15, 2026 | Mar 25, 2026 |
| Rocky_linux | — | Upgrade bind9.18-libsUpgrade bind9.18-libs-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-export-develUpgrade bind-utilsUpgrade bindUpgrade bind-chrootUpgrade bind-sdbUpgrade bind-libs-lite-debuginfoUpgrade bind-lite-develUpgrade bind-pkcs11Upgrade bind-pkcs11-utils-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-debugsourceUpgrade bind9.18-chrootUpgrade bind-pkcs11-utilsUpgrade bind9.16-chrootUpgrade bind9.16-develUpgrade bind-debuginfoUpgrade bind-libs-liteUpgrade bind9.18Upgrade bind9.16-libsUpgrade bind-export-libsUpgrade bind9.18-debugsourceUpgrade bind-develUpgrade bind9.18-develUpgrade bind-export-libs-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind9.16-debugsourceUpgrade bind-libs-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-sdb-debuginfoUpgrade bind-sdb-chrootUpgrade bind9.18-dnssec-utilsUpgrade bind9.16-debuginfoUpgrade bind9.18-utilsUpgrade bind-dnssec-utilsUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-develUpgrade bind-pkcs11-debuginfoUpgrade bind-libsUpgrade bind9.16-utilsUpgrade bind9.16Upgrade bind9.16-utils-debuginfoUpgrade bind9.18-utils-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind9.18-debuginfo | Apr 16, 2026 | Apr 15, 2026 |
| Suse | — | Upgrade bind-chrootenvUpgrade libbind9-161Upgrade python3-bindUpgrade libisccfg163Upgrade liblwres161Upgrade libdns1605Upgrade bind-develUpgrade bind-utilsUpgrade libisccfg1600Upgrade libisc1107-32bitUpgrade bind-modules-perlUpgrade bind-modules-sqlite3Upgrade bind-modules-mysqlUpgrade libirs1601Upgrade libisc1606Upgrade libdns1110Upgrade bind-modules-bdbhptUpgrade libirs161Upgrade libisccc161Upgrade libirs-develUpgrade libisc1107Upgrade bindUpgrade bind-docUpgrade python-bindUpgrade bind-modules-ldapUpgrade bind-modules-generic | Apr 10, 2026 | Apr 8, 2026 |
| Ubuntu | — | Upgrade bind9 | Mar 27, 2026 | Mar 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 1, 2026 | Mar 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub