If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-timeout 0;`, a sequence of serve-stale-related lookups could cause `named` to loop and terminate unexpectedly due to a stack overflow. This issue affects BIND 9 versions 9.16.33 through 9.16.41, 9.18.7 through 9.18.15, 9.16.33-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Oct 1, 2024 | Jun 21, 2023 |
| Amazon_linux_2023 | — | Upgrade bind-pkcs11-utils-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-utilsUpgrade bind-dnssec-docUpgrade bind-chrootUpgrade bind-docUpgrade bind-dlz-mysqlUpgrade bind-dnssec-utilsUpgrade bind-dlz-mysql-debuginfoUpgrade bind-dlz-ldapUpgrade bind-pkcs11-debuginfoUpgrade bind-dlz-filesystem-debuginfoUpgrade bind-dlz-ldap-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-libsUpgrade bind-dlz-filesystemUpgrade bind-debuginfoUpgrade bind-pkcs11-utilsUpgrade python3-bindUpgrade bindUpgrade bind-dlz-sqlite3-debuginfoUpgrade bind-develUpgrade bind-libs-debuginfoUpgrade bind-pkcs11-develUpgrade bind-dlz-sqlite3Upgrade bind-licenseUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-pkcs11Upgrade bind-debugsource | Feb 17, 2025 | Jun 21, 2023 |
| Debian | — | Upgrade bind9 | Jul 4, 2023 | Jun 21, 2023 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Aug 1, 2023 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bindUpgrade bind-pkcs11Upgrade bind-pkcs11-utilsUpgrade bind-licenseUpgrade bind-libsUpgrade bind-dnssec-utilsUpgrade python3-bindUpgrade bind-dnssec-docUpgrade bind-utilsUpgrade bind-chrootUpgrade bind-pkcs11-libs | Jan 10, 2024 | Jun 21, 2023 |
| Suse | — | Upgrade bindUpgrade bind-docUpgrade bind-utilsUpgrade python3-bind | Jun 29, 2023 | Jun 21, 2023 |
| Ubuntu | — | Upgrade bind9 | Jun 22, 2023 | Jun 21, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 21, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub