The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Sending a flood of dynamic DNS updates may cause `named` to allocate large amounts of memory. This, in turn, may cause `named` to exit due to a lack of free memory. We are not aware of any cases where this has been exploited.
Memory is allocated prior to the checking of access permissions (ACLs) and is retained during the processing of a dynamic update from a client whose access credentials are accepted. Memory allocated to clients that are not permitted to send updates is released immediately upon rejection. The scope of this vulnerability is limited therefore to trusted clients who are permitted to make dynamic zone changes.
If a dynamic update is REFUSED, memory will be released again very quickly. Therefore it is only likely to be possible to degrade or stop `named` by sending a flood of unaccepted dynamic updates comparable in magnitude to a query flood intended to achieve the same detrimental outcome.
BIND 9.11 and earlier branches are also affected, but through exhaustion of internal resources rather than memory constraints. This may reduce performance but should not be a significant problem for most servers. Therefore we don't intend to address this for BIND versions prior to BIND 9.16. This issue affects BIND 9 versions 9.16.0 through 9.16.36, 9.18.0 through 9.18.10, 9.19.0 through 9.19.8, and 9.16.8-S1 through 9.16.36-S1.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-pkcs11-develUpgrade bind-sdb-chrootUpgrade python3-bindUpgrade bind9.16-utilsUpgrade bind9.16-licenseUpgrade bind-utilsUpgrade bind9.16-develUpgrade bind-lite-develUpgrade bind-pkcs11-libsUpgrade bind9.16Upgrade bind9.16-docUpgrade bind-chrootUpgrade bind-sdbUpgrade bind9.16-dnssec-utilsUpgrade bind-docUpgrade bind9.16-libsUpgrade bind-dnssec-utilsUpgrade bind-export-libsUpgrade bindUpgrade python3-bind9.16Upgrade bind9.16-chrootUpgrade bind-pkcs11Upgrade bind-libs-liteUpgrade bind-libsUpgrade bind-licenseUpgrade bind-pkcs11-utilsUpgrade bind-develUpgrade bind-export-develUpgrade bind-dnssec-doc | May 15, 2023 | Jan 26, 2023 |
| Alpine Linux | — | Upgrade bind | Aug 22, 2024 | Jan 25, 2023 |
| Amazon Linux Ami 2 | — | Upgrade bind-sdbUpgrade bind-pkcs11-utilsUpgrade bind-develUpgrade bind-debuginfoUpgrade bind-lite-develUpgrade bind-chrootUpgrade bind-libs-liteUpgrade bind-pkcs11Upgrade bind-sdb-chrootUpgrade bind-export-develUpgrade bindUpgrade bind-libsUpgrade bind-pkcs11-libsUpgrade bind-export-libsUpgrade bind-utilsUpgrade bind-licenseUpgrade bind-pkcs11-devel | Jan 10, 2025 | Jan 26, 2023 |
| Amazon_linux_2023 | — | Upgrade bind-dnssec-utilsUpgrade bindUpgrade bind-pkcs11Upgrade bind-dlz-mysqlUpgrade bind-libs-debuginfoUpgrade bind-dlz-ldapUpgrade bind-dlz-ldap-debuginfoUpgrade bind-licenseUpgrade bind-dlz-sqlite3-debuginfoUpgrade bind-debugsourceUpgrade bind-develUpgrade bind-dlz-mysql-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade python3-bindUpgrade bind-pkcs11-develUpgrade bind-pkcs11-debuginfoUpgrade bind-utilsUpgrade bind-dlz-filesystem-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-libsUpgrade bind-pkcs11-libsUpgrade bind-debuginfoUpgrade bind-dnssec-docUpgrade bind-chrootUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-dlz-filesystemUpgrade bind-utils-debuginfoUpgrade bind-dlz-sqlite3 | Feb 17, 2025 | Jan 25, 2023 |
| Centos_linux | — | Upgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind9.16-utilsUpgrade bind9.16-libs-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade bind-libsUpgrade bind-libs-lite-debuginfoUpgrade python3-bind9.16Upgrade bind-debuginfoUpgrade bind9.16-chrootUpgrade bind-pkcs11Upgrade bind9.16-debuginfoUpgrade bind-export-libs-debuginfoUpgrade bind-pkcs11-develUpgrade bind-dnssec-utils-debuginfoUpgrade bind9.16-debugsourceUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind9.16Upgrade bind-develUpgrade python3-bindUpgrade bind9.16-dnssec-utilsUpgrade bind-pkcs11-libsUpgrade bind-licenseUpgrade bind-sdbUpgrade bind-pkcs11-utilsUpgrade bind-libs-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-export-libsUpgrade bind-export-develUpgrade bind-debugsourceUpgrade bind-lite-develUpgrade bind-utils-debuginfoUpgrade bind-utilsUpgrade bind9.16-licenseUpgrade bind-dnssec-docUpgrade bind9.16-libsUpgrade bind-sdb-debuginfoUpgrade bindUpgrade bind-libs-liteUpgrade bind-sdb-chrootUpgrade bind-chrootUpgrade bind-pkcs11-debuginfo | May 15, 2023 | Jan 26, 2023 |
| Debian | — | Upgrade bind9 | Jan 30, 2023 | Jan 26, 2023 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Mar 7, 2023 | Jan 26, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bind-dnssec-utilsUpgrade python3-bindUpgrade bind-libsUpgrade bind-dnssec-docUpgrade bindUpgrade bind-chrootUpgrade bind-pkcs11Upgrade bind-utilsUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-utilsUpgrade bind-license | May 8, 2023 | Jan 26, 2023 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory23 | Jul 27, 2023 | Jan 26, 2023 |
| Oracle_linux | — | Upgrade bind-libsUpgrade bind-sdb-chrootUpgrade bind9.16-dnssec-utilsUpgrade bind9.16Upgrade bind9.16-chrootUpgrade bind-licenseUpgrade bind-dnssec-utilsUpgrade python3-bindUpgrade bind-export-libsUpgrade bind-export-develUpgrade python3-bind9.16Upgrade bind-pkcs11-develUpgrade bind9.16-licenseUpgrade bind9.16-utilsUpgrade bind-sdbUpgrade bind9.16-libsUpgrade bind9.16-docUpgrade bind-libs-liteUpgrade bind-pkcs11-utilsUpgrade bind-docUpgrade bindUpgrade bind-pkcs11Upgrade bind-utilsUpgrade bind-lite-develUpgrade bind-chrootUpgrade bind-dnssec-docUpgrade bind9.16-develUpgrade bind-pkcs11-libsUpgrade bind-devel | May 18, 2023 | Jan 25, 2023 |
| Redhat_linux | — | Upgrade bind-pkcs11-develUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-libs-debuginfoUpgrade bind9.16-utilsUpgrade bind9.16-docUpgrade python3-bindUpgrade bind-libs-debuginfoUpgrade dhcp-clientUpgrade dhcp-client-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-sdb-debuginfoUpgrade dhcp-commonUpgrade dhcp-relay-debuginfoUpgrade bind9.16-debugsourceUpgrade bind-export-libsNo solution existsUpgrade python3-bind9.16Upgrade bind9.16-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade dhcp-debuginfoUpgrade bind9.16-licenseUpgrade dhcp-relayUpgrade dhcp-serverUpgrade bind-sdb-chrootUpgrade bind9.16-libsUpgrade dhcp-debugsourceUpgrade bind-licenseUpgrade dhcp-libs-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind9.16Upgrade bind-libs-liteUpgrade bind-dnssec-docUpgrade bind-debugsourceUpgrade bind-docUpgrade bind-dnssec-utilsUpgrade bind-export-libs-debuginfoUpgrade bind-chrootUpgrade bind-sdbUpgrade bind-pkcs11Upgrade bind9.16-chrootUpgrade bind9.16-develUpgrade bind-utilsUpgrade bind-export-develUpgrade bind-pkcs11-utilsUpgrade bind-libsUpgrade bind9.16-utils-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind-lite-develUpgrade bind-develUpgrade bind-utils-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade dhcp-libsUpgrade bind-libs-lite-debuginfoUpgrade bind-debuginfoUpgrade bindUpgrade dhcp-server-debuginfo | May 15, 2023 | Jan 26, 2023 |
| Suse | — | Upgrade bind-utilsUpgrade python3-bindUpgrade libisccc1600Upgrade libdns1605Upgrade libns1604Upgrade libisccfg1600Upgrade libirs1601Upgrade libisc1606Upgrade bind-develUpgrade libirs-develUpgrade libbind9-1600Upgrade bind-chrootenvUpgrade bindUpgrade bind-doc | Feb 13, 2023 | Jan 26, 2023 |
| Ubuntu | — | Upgrade bind9 | Mar 22, 2023 | Jan 26, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 25, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub