BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-bindUpgrade bind9.16-licenseUpgrade bind9.16Upgrade bind9.18Upgrade bind-develUpgrade bind-dnssec-utilsUpgrade bind9.16-dnssec-utilsUpgrade bind-licenseUpgrade bind9.16-chrootUpgrade bind-libsUpgrade bind9.16-utilsUpgrade bind9.18-utilsUpgrade python3-bind9.16Upgrade bind-export-libsUpgrade bind-pkcs11-develUpgrade bind9.16-libsUpgrade bind9.18-develUpgrade bind-sdb-chrootUpgrade bind-export-develUpgrade bind9.18-docUpgrade bind9.16-docUpgrade bindUpgrade bind9.16-develUpgrade bind-libs-liteUpgrade bind-dnssec-docUpgrade bind-sdbUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-chrootUpgrade bind-lite-develUpgrade bind-chrootUpgrade bind-docUpgrade bind-pkcs11-utilsUpgrade bind-utilsUpgrade bind-pkcs11-libsUpgrade bind-pkcs11Upgrade bind9.18-libs | Jun 7, 2026 | Jun 4, 2026 |
| Alpine Linux | — | Upgrade bind | May 25, 2026 | May 20, 2026 |
| Amazon Linux Ami 2 | — | Upgrade bind-pkcs11Upgrade bind-licenseUpgrade bind-libsUpgrade bind-debuginfoUpgrade bind-pkcs11-utilsUpgrade bindUpgrade bind-sdb-chrootUpgrade bind-develUpgrade bind-export-develUpgrade bind-sdbUpgrade bind-lite-develUpgrade bind-pkcs11-libsUpgrade bind-chrootUpgrade bind-libs-liteUpgrade bind-pkcs11-develUpgrade bind-utilsUpgrade bind-export-libs | Jun 9, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade bind-dnssec-utils-debuginfoUpgrade bind-chrootUpgrade bind-develUpgrade bind-libsUpgrade bind-utilsUpgrade bind-debuginfoUpgrade bindUpgrade bind-dnssec-utilsUpgrade bind-licenseUpgrade bind-utils-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-debugsourceUpgrade bind-doc | May 28, 2026 | May 20, 2026 |
| Debian | — | Upgrade bind9 | May 24, 2026 | May 24, 2026 |
| Oracle_linux | — | Upgrade bind9.16-develUpgrade bind9.16-licenseUpgrade bind9.16-docUpgrade bind-lite-develUpgrade bind9.16-libsUpgrade bind-pkcs11-libsUpgrade bind-sdbUpgrade bind-pkcs11-develUpgrade bind-utilsUpgrade bind9.16-utilsUpgrade bind-chrootUpgrade bind-export-develUpgrade bind-export-libsUpgrade bind9.16-dnssec-utilsUpgrade bind-libs-liteUpgrade bind9.16Upgrade bind-pkcs11-utilsUpgrade bind-develUpgrade bind-libsUpgrade bindUpgrade bind-licenseUpgrade python3-bind9.16Upgrade bind9.16-chrootUpgrade bind-sdb-chrootUpgrade bind-pkcs11Upgrade python3-bind | Jun 8, 2026 | May 20, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Sep 11, 2026 | May 21, 2026 |
| Redhat_linux | — | Upgrade bindUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-export-libsUpgrade bind-sdbUpgrade bind9.18-libsUpgrade bind9.16-libsUpgrade bind9.18-dnssec-utilsUpgrade bind-debugsourceUpgrade bind9.16-dnssec-utilsUpgrade bind-dnssec-utilsUpgrade bind-debuginfoUpgrade bind-chrootUpgrade bind9.16-docUpgrade bind9.18Upgrade bind9.18-libs-debuginfoUpgrade python3-bind9.16Upgrade bind-utils-debuginfoUpgrade bind9.18-docUpgrade bind-dnssec-docUpgrade bind-export-develUpgrade bind-dnssec-utils-debuginfoUpgrade bind-docUpgrade bind-pkcs11-libs-debuginfoUpgrade bind9.18-chrootUpgrade bind-lite-develUpgrade bind9.16-utilsUpgrade bind-libs-lite-debuginfoUpgrade bind9.16-develUpgrade bind-utilsUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11-libsUpgrade bind9.18-utilsUpgrade bind-pkcs11-debuginfoUpgrade bind-libs-liteUpgrade bind-licenseUpgrade bind-pkcs11-develUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind-sdb-chrootUpgrade bind9.16Upgrade bind9.18-utils-debuginfoUpgrade bind9.18-develUpgrade bind9.16-debuginfoUpgrade bind9.16-chrootUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind-libsUpgrade bind9.16-utils-debuginfoUpgrade bind9.18-debuginfoUpgrade bind-libs-debuginfoUpgrade bind9.18-debugsourceUpgrade bind-pkcs11No solution existsUpgrade bind-export-libs-debuginfoUpgrade bind9.16-debugsourceUpgrade bind9.16-licenseUpgrade python3-bindUpgrade bind-sdb-debuginfoUpgrade bind-devel | Jun 8, 2026 | May 21, 2026 |
| Rocky_linux | — | Upgrade bind9.18-libsUpgrade bind-pkcs11-develUpgrade bind9.18-libs-debuginfoUpgrade bind-libs-debuginfoUpgrade bind9.18Upgrade bind-sdb-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade bind9.18-debugsourceUpgrade bind9.16-utils-debuginfoUpgrade bind9.16-chrootUpgrade bind-libsUpgrade bind9.16Upgrade bind-dnssec-utilsUpgrade bind9.16-libsUpgrade bind9.18-utilsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind9.16-debuginfoUpgrade bind-export-develUpgrade bind-sdb-chrootUpgrade bind9.16-utilsUpgrade bind-export-libsUpgrade bind9.18-develUpgrade bind9.18-debuginfoUpgrade bind9.16-develUpgrade bind-sdbUpgrade bind-utils-debuginfoUpgrade bind-pkcs11-libsUpgrade bindUpgrade bind-libs-liteUpgrade bind-pkcs11-libs-debuginfoUpgrade bind9.18-utils-debuginfoUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind9.18-chrootUpgrade bind-lite-develUpgrade bind-debugsourceUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-libs-lite-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-debuginfoUpgrade bind-utilsUpgrade bind9.16-debugsourceUpgrade bind-export-libs-debuginfoUpgrade bind-chrootUpgrade bind9.16-libs-debuginfoUpgrade bind-pkcs11Upgrade bind-develUpgrade bind9.18-dnssec-utils | Jun 8, 2026 | Jun 6, 2026 |
| Suse | — | Upgrade bind-utilsUpgrade bind-modules-ldapUpgrade bind-docUpgrade bind-modules-perlUpgrade bind-modules-genericUpgrade libirs161Upgrade libisccc161Upgrade libisc1606Upgrade libbind9-161Upgrade bind-modules-bdbhptUpgrade libisc1107-32bitUpgrade libdns1110Upgrade python-bindUpgrade bind-develUpgrade libirs1601Upgrade bindUpgrade liblwres161Upgrade libirs-develUpgrade libdns1605Upgrade libisccfg163Upgrade bind-modules-sqlite3Upgrade python3-bindUpgrade libisccfg1600Upgrade bind-modules-mysqlUpgrade bind-chrootenvUpgrade libisc1107 | Jun 8, 2026 | Jun 5, 2026 |
| Ubuntu | — | Upgrade bind9Upgrade bind9 (Ubuntu Pro) | May 25, 2026 | May 21, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 17, 2026 | May 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub