BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-pkcs11-develUpgrade bind9.16-utilsUpgrade bind9.16-dnssec-utilsUpgrade bind9.18-utilsUpgrade bind9.16-licenseUpgrade bind-libsUpgrade python3-bind9.16Upgrade bind-develUpgrade bind-sdb-chrootUpgrade bind9.18-develUpgrade bind9.18Upgrade bind-export-develUpgrade bind-dnssec-utilsUpgrade bind-licenseUpgrade bind9.16-chrootUpgrade bind-export-libsUpgrade python3-bindUpgrade bind9.16-libsUpgrade bind9.16Upgrade bind-lite-develUpgrade bind-pkcs11-libsUpgrade bind-sdbUpgrade bind-chrootUpgrade bindUpgrade bind9.18-docUpgrade bind-utilsUpgrade bind-pkcs11Upgrade bind-docUpgrade bind-libs-liteUpgrade bind-dnssec-docUpgrade bind9.18-chrootUpgrade bind-pkcs11-utilsUpgrade bind9.16-develUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-libsUpgrade bind9.16-doc | Jun 7, 2026 | Jun 4, 2026 |
| Alpine Linux | — | Upgrade bind | May 25, 2026 | May 20, 2026 |
| Amazon Linux Ami 2 | — | Upgrade bind-lite-develUpgrade bind-chrootUpgrade bind-pkcs11-develUpgrade bind-pkcs11-libsUpgrade bind-libs-liteUpgrade bind-utilsUpgrade bind-export-libsUpgrade bind-pkcs11Upgrade bind-develUpgrade bind-pkcs11-utilsUpgrade bind-export-develUpgrade bind-sdbUpgrade bind-sdb-chrootUpgrade bindUpgrade bind-licenseUpgrade bind-debuginfoUpgrade bind-libs | Jun 9, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade bind-develUpgrade bind-libsUpgrade bind-dnssec-utils-debuginfoUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-docUpgrade bind-debuginfoUpgrade bind-licenseUpgrade bind-debugsourceUpgrade bindUpgrade bind-utils-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-dnssec-utils | May 28, 2026 | May 20, 2026 |
| Debian | — | Upgrade bind9 | May 24, 2026 | May 24, 2026 |
| Oracle_linux | — | Upgrade bind-libsUpgrade bind-libs-liteUpgrade bind-sdb-chrootUpgrade bindUpgrade bind9.16-dnssec-utilsUpgrade bind-pkcs11Upgrade bind9.16-chrootUpgrade bind-licenseUpgrade bind-develUpgrade python3-bind9.16Upgrade python3-bindUpgrade bind-pkcs11-utilsUpgrade bind9.16Upgrade bind9.16-docUpgrade bind-utilsUpgrade bind9.16-libsUpgrade bind9.16-licenseUpgrade bind9.16-develUpgrade bind-lite-develUpgrade bind-chrootUpgrade bind9.16-utilsUpgrade bind-sdbUpgrade bind-export-develUpgrade bind-pkcs11-libsUpgrade bind-export-libsUpgrade bind-pkcs11-devel | Jun 8, 2026 | May 20, 2026 |
| Redhat Openshift | — | Upgrade ose-rhel-coreos | Sep 11, 2026 | May 21, 2026 |
| Redhat_linux | — | Upgrade bind9.18-dnssec-utilsUpgrade bind9.16-libsUpgrade bind-export-libsUpgrade bind9.18Upgrade bind9.18-libs-debuginfoUpgrade bind9.16-docUpgrade bind9.16-dnssec-utilsUpgrade bind-dnssec-utils-debuginfoUpgrade python3-bind9.16Upgrade bind-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-lite-develUpgrade bind-export-develUpgrade bind-debugsourceUpgrade bindUpgrade bind-sdbUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-docUpgrade bind9.18-libsUpgrade bind9.18-docUpgrade bind-utils-debuginfoUpgrade bind-dnssec-docUpgrade bind-libs-lite-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind9.16-utilsUpgrade bind-chrootUpgrade bind9.18-chrootUpgrade bind9.16-develUpgrade bind9.16-libs-debuginfoNo solution existsUpgrade bind-sdb-chrootUpgrade bind-export-libs-debuginfoUpgrade bind9.16Upgrade bind-licenseUpgrade bind-pkcs11-debuginfoUpgrade bind9.18-utilsUpgrade bind-pkcs11Upgrade bind-sdb-debuginfoUpgrade bind9.18-develUpgrade bind9.16-debuginfoUpgrade bind9.18-debugsourceUpgrade bind-libsUpgrade bind-pkcs11-utilsUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind9.18-debuginfoUpgrade python3-bindUpgrade bind9.16-chrootUpgrade bind9.18-utils-debuginfoUpgrade bind-utilsUpgrade bind9.16-debugsourceUpgrade bind-pkcs11-libsUpgrade bind-libs-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade bind-pkcs11-develUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-develUpgrade bind9.16-licenseUpgrade bind-libs-lite | Jun 8, 2026 | May 21, 2026 |
| Rocky_linux | — | Upgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-sdbUpgrade bind-pkcs11-utilsUpgrade bind9.16-debugsourceUpgrade bind-libs-liteUpgrade bind9.18-dnssec-utilsUpgrade bind9.16-develUpgrade bind9.18-debuginfoUpgrade bind-lite-develUpgrade bind9.16-libs-debuginfoUpgrade bind-chrootUpgrade bindUpgrade bind-libs-lite-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-pkcs11Upgrade bind-export-libs-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind9.18-utils-debuginfoUpgrade bind-debuginfoUpgrade bind-debugsourceUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-develUpgrade bind9.18-chrootUpgrade bind-utils-debuginfoUpgrade bind-utilsUpgrade bind9.18-debugsourceUpgrade bind-libs-debuginfoUpgrade bind9.18-libs-debuginfoUpgrade bind9.18-libsUpgrade bind-pkcs11-develUpgrade bind-dnssec-utilsUpgrade bind9.16Upgrade bind-sdb-chrootUpgrade bind9.16-chrootUpgrade bind9.18Upgrade bind9.16-utils-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade bind-sdb-debuginfoUpgrade bind9.18-utilsUpgrade bind9.16-libsUpgrade bind9.16-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-libsUpgrade bind9.16-utilsUpgrade bind-dnssec-utils-debuginfoUpgrade bind9.18-develUpgrade bind-export-libsUpgrade bind-export-devel | Jun 8, 2026 | Jun 6, 2026 |
| Suse | — | Upgrade bind-modules-perlUpgrade libisc1107-32bitUpgrade libdns1110Upgrade libisccc161Upgrade bind-docUpgrade libirs161Upgrade libbind9-161Upgrade bind-utilsUpgrade bind-modules-ldapUpgrade python-bindUpgrade bind-modules-bdbhptUpgrade libisc1606Upgrade bind-modules-genericUpgrade libisc1107Upgrade bind-chrootenvUpgrade libisccfg163Upgrade liblwres161Upgrade libdns1605Upgrade bind-modules-mysqlUpgrade python3-bindUpgrade libisccfg1600Upgrade bindUpgrade libirs-develUpgrade bind-develUpgrade libirs1601Upgrade bind-modules-sqlite3 | Jun 8, 2026 | Jun 5, 2026 |
| Ubuntu | — | Upgrade bind9Upgrade bind9 (Ubuntu Pro) | May 25, 2026 | May 21, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 17, 2026 | May 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub