If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-timeout 0;`, a sequence of serve-stale-related lookups could cause `named` to loop and terminate unexpectedly due to a stack overflow. This issue affects BIND 9 versions 9.16.33 through 9.16.41, 9.18.7 through 9.18.15, 9.16.33-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Oct 1, 2024 | Jun 21, 2023 |
| Amazon_linux_2023 | — | Upgrade bind-pkcs11-develUpgrade bind-dlz-sqlite3Upgrade bind-develUpgrade bind-libs-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-dlz-sqlite3-debuginfoUpgrade bind-libsUpgrade bind-pkcs11-utilsUpgrade bind-debuginfoUpgrade bindUpgrade python3-bindUpgrade bind-licenseUpgrade bind-debugsourceUpgrade bind-dlz-filesystemUpgrade bind-pkcs11Upgrade bind-dnssec-utils-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-dlz-ldapUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-dnssec-docUpgrade bind-dlz-mysqlUpgrade bind-dnssec-utilsUpgrade bind-dlz-mysql-debuginfoUpgrade bind-utilsUpgrade bind-chrootUpgrade bind-dlz-ldap-debuginfoUpgrade bind-dlz-filesystem-debuginfoUpgrade bind-doc | Feb 17, 2025 | Jun 21, 2023 |
| Debian | — | Upgrade bind9 | Jul 4, 2023 | Jun 21, 2023 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Aug 1, 2023 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bind-licenseUpgrade bind-libsUpgrade bind-pkcs11Upgrade bind-pkcs11-utilsUpgrade bindUpgrade bind-pkcs11-libsUpgrade bind-utilsUpgrade bind-chrootUpgrade bind-dnssec-docUpgrade python3-bindUpgrade bind-dnssec-utils | Jan 10, 2024 | Jun 21, 2023 |
| Suse | — | Upgrade bind-utilsUpgrade python3-bindUpgrade bind-docUpgrade bind | Jun 29, 2023 | Jun 21, 2023 |
| Ubuntu | — | Upgrade bind9 | Jun 22, 2023 | Jun 21, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 21, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub