If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-timeout 0;`, a sequence of serve-stale-related lookups could cause `named` to loop and terminate unexpectedly due to a stack overflow. This issue affects BIND 9 versions 9.16.33 through 9.16.41, 9.18.7 through 9.18.15, 9.16.33-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Oct 1, 2024 | Jun 21, 2023 |
| Amazon_linux_2023 | — | Upgrade bind-pkcs11-develUpgrade bind-dlz-filesystemUpgrade python3-bindUpgrade bindUpgrade bind-libsUpgrade bind-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-dnssec-utils-debuginfoUpgrade bind-licenseUpgrade bind-debugsourceUpgrade bind-pkcs11Upgrade bind-dlz-sqlite3Upgrade bind-pkcs11-libs-debuginfoUpgrade bind-develUpgrade bind-dlz-sqlite3-debuginfoUpgrade bind-dlz-filesystem-debuginfoUpgrade bind-docUpgrade bind-dlz-ldapUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-dnssec-docUpgrade bind-dlz-ldap-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-dlz-mysql-debuginfoUpgrade bind-dlz-mysqlUpgrade bind-pkcs11-libs | Feb 17, 2025 | Jun 21, 2023 |
| Debian | — | Upgrade bind9 | Jul 4, 2023 | Jun 21, 2023 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Aug 1, 2023 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bind-pkcs11Upgrade bind-pkcs11-utilsUpgrade bindUpgrade bind-licenseUpgrade bind-libsUpgrade bind-dnssec-utilsUpgrade python3-bindUpgrade bind-dnssec-docUpgrade bind-pkcs11-libsUpgrade bind-chrootUpgrade bind-utils | Jan 10, 2024 | Jun 21, 2023 |
| Suse | — | Upgrade bind-utilsUpgrade python3-bindUpgrade bind-docUpgrade bind | Jun 29, 2023 | Jun 21, 2023 |
| Ubuntu | — | Upgrade bind9 | Jun 22, 2023 | Jun 21, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 21, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub