The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory, causing `named` to terminate unexpectedly. Since each incoming control channel message is fully parsed before its contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key; only network access to the control channel's configured TCP port is necessary. This issue affects BIND 9 versions 9.2.0 through 9.16.43, 9.18.0 through 9.18.18, 9.19.0 through 9.19.16, 9.9.3-S1 through 9.16.43-S1, and 9.18.0-S1 through 9.18.18-S1.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-chrootUpgrade bind-pkcs11Upgrade bind-sdbUpgrade bindUpgrade bind-export-develUpgrade bind-dnssec-docUpgrade bind9.16-libsUpgrade bind-export-libsUpgrade bind-libs-liteUpgrade bind-dnssec-utilsUpgrade bind9.16-chrootUpgrade bind-pkcs11-utilsUpgrade bind-docUpgrade python3-bind9.16Upgrade bind-lite-develUpgrade bind9.16-docUpgrade bind9.16-dnssec-utilsUpgrade bind-develUpgrade bind-pkcs11-develUpgrade bind-utilsUpgrade bind-libsUpgrade bind-licenseUpgrade bind9.16-licenseUpgrade bind-pkcs11-libsUpgrade bind9.16-utilsUpgrade bind9.16Upgrade python3-bindUpgrade bind-sdb-chrootUpgrade bind9.16-devel | Oct 10, 2023 | Sep 20, 2023 |
| Alpine Linux | — | Upgrade bind | Mar 26, 2024 | Sep 20, 2023 |
| Amazon Linux Ami 2 | — | Upgrade bind-sdbUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-lite-develUpgrade bind-libs-liteUpgrade bind-libsUpgrade bind-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11-libsUpgrade bind-develUpgrade bind-export-develUpgrade bind-pkcs11-develUpgrade bind-licenseUpgrade bind-sdb-chrootUpgrade bindUpgrade bind-pkcs11Upgrade bind-export-libs | Oct 6, 2023 | Sep 20, 2023 |
| Amazon_linux | — | Upgrade bind | Oct 7, 2023 | Sep 20, 2023 |
| Amazon_linux_2023 | — | Upgrade python3-bindUpgrade bind-debuginfoUpgrade bindUpgrade bind-develUpgrade bind-dnssec-utils-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-dlz-sqlite3-debuginfoUpgrade bind-libsUpgrade bind-pkcs11-develUpgrade bind-pkcs11Upgrade bind-licenseUpgrade bind-dlz-sqlite3Upgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-chrootUpgrade bind-dlz-filesystem-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-pkcs11-utilsUpgrade bind-utils-debuginfoUpgrade bind-docUpgrade bind-dnssec-docUpgrade bind-pkcs11-debuginfoUpgrade bind-debugsourceUpgrade bind-dlz-ldap-debuginfoUpgrade bind-utilsUpgrade bind-dlz-mysql-debuginfoUpgrade bind-dlz-ldapUpgrade bind-pkcs11-libsUpgrade bind-dlz-filesystemUpgrade bind-dlz-mysql | Feb 17, 2025 | Sep 20, 2023 |
| Centos_linux | — | Upgrade bind-develUpgrade bind-pkcs11-libsUpgrade bind-debuginfoUpgrade bind-sdbUpgrade bind-lite-develUpgrade bind-utilsUpgrade bind-libs-liteUpgrade bind-chrootUpgrade bind-pkcs11-utilsUpgrade bind-libsUpgrade bind-export-libsUpgrade bindUpgrade bind-sdb-chrootUpgrade bind-pkcs11-develUpgrade bind-licenseUpgrade bind-pkcs11Upgrade bind-export-devel | Oct 6, 2023 | Sep 20, 2023 |
| Debian | — | Upgrade bind9 | Sep 25, 2023 | Sep 20, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jan 29, 2024 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade dhcp | Jan 10, 2024 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bind-dnssec-utilsUpgrade bindUpgrade bind-pkcs11-utilsUpgrade bind-dnssec-docUpgrade bind-pkcs11Upgrade bind-chrootUpgrade bind-libsUpgrade bind-licenseUpgrade python3-bindUpgrade bind-utilsUpgrade bind-pkcs11-libs | Jan 10, 2024 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade dhcp | Mar 19, 2025 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp13 | — | Upgrade dhcp | Apr 1, 2025 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade bind-pkcs11-libsUpgrade bind-chrootUpgrade bind-libs-liteUpgrade bind-utilsUpgrade bind-libsUpgrade bind-pkcs11Upgrade bind-pkcs11-utilsUpgrade bindUpgrade bind-license | Feb 12, 2024 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bind-libsUpgrade bind-export-develUpgrade bind-licenseUpgrade python3-bindUpgrade bind-utilsUpgrade bind-pkcs11-libsUpgrade bind-libs-liteUpgrade bind-pkcs11Upgrade bind-chrootUpgrade bind-pkcs11-utilsUpgrade bindUpgrade bind-export-libs | Mar 13, 2024 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade bind-libsUpgrade python3-bindUpgrade bind-utilsUpgrade bind-libs-liteUpgrade bind-pkcs11Upgrade bind-chrootUpgrade bind-export-libsUpgrade bind | Jan 10, 2024 | Sep 20, 2023 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory25 | Dec 19, 2023 | Sep 20, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Feb 20, 2024 |
| Oracle_linux | — | Upgrade python3-bindUpgrade bind9.16-libsUpgrade bind-pkcs11-libsUpgrade bind9.16-chrootUpgrade bind-libsUpgrade bind-licenseUpgrade bind-pkcs11Upgrade bind-pkcs11-develUpgrade bind-develUpgrade bind-dnssec-utilsUpgrade bind9.16Upgrade bind9.16-licenseUpgrade bind-libs-liteUpgrade bind-pkcs11-utilsUpgrade bind-export-libsUpgrade bind-sdb-chrootUpgrade bind-export-develUpgrade bind-utilsUpgrade bind9.16-develUpgrade bind9.16-dnssec-utilsUpgrade bindUpgrade bind9.16-utilsUpgrade bind9.16-docUpgrade bind-lite-develUpgrade bind-chrootUpgrade python3-bind9.16Upgrade bind-sdbUpgrade bind-dnssec-docUpgrade bind-doc | Oct 7, 2023 | Sep 20, 2023 |
| Redhat_linux | — | Upgrade bind-dnssec-utils-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind9.16-libsUpgrade bindUpgrade bind9.16-docUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade bind-debuginfoUpgrade bind-docUpgrade bind-utils-debuginfoUpgrade bind-export-libsUpgrade bind-debugsourceUpgrade python3-bind9.16Upgrade bind-dnssec-docUpgrade bind-export-develUpgrade bind-dnssec-utilsUpgrade bind-chrootUpgrade bind9.16-utilsUpgrade bind-lite-develUpgrade bind-sdbUpgrade bind9.16-develUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind9.16Upgrade bind-sdb-debuginfoUpgrade python3-bindUpgrade bind9.16-chrootUpgrade bind-develUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind9.16-licenseUpgrade bind-export-libs-debuginfoUpgrade bind9.16-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11Upgrade bind-libsUpgrade bind9.16-utils-debuginfoUpgrade bind-pkcs11-develUpgrade bind-utilsUpgrade bind-sdb-chrootUpgrade bind9.16-debugsourceUpgrade bind-libs-liteUpgrade bind-libs-debuginfoUpgrade bind-license | Oct 6, 2023 | Sep 20, 2023 |
| Rocky_linux | — | — | Aug 15, 2024 | Sep 20, 2023 |
| Suse | — | Upgrade bind-chrootenvUpgrade libisc1107Upgrade libirs-develUpgrade bindUpgrade libdns1605-32bitUpgrade libisc1606Upgrade libbind9-1600Upgrade libdns1605Upgrade bind-develUpgrade libbind9-1600-32bitUpgrade liblwres161Upgrade libisccfg1600-32bitUpgrade libisccc1600-32bitUpgrade python3-bindUpgrade libns1604Upgrade libdns1110Upgrade bind-devel-32bitUpgrade libisccfg1600Upgrade libirs161Upgrade bind-docUpgrade libirs1601Upgrade libns1604-32bitUpgrade libirs1601-32bitUpgrade libisccfg163Upgrade libisccc161Upgrade libisccc1600Upgrade libisc1606-32bitUpgrade python-bindUpgrade bind-utilsUpgrade libbind9-161Upgrade libisc1107-32bit | Sep 25, 2023 | Sep 20, 2023 |
| Ubuntu | — | Upgrade libbind9-140 (Ubuntu Pro)Upgrade bind9Upgrade libbind9-160 (Ubuntu Pro)Upgrade bind9 (Ubuntu Pro)Upgrade libbind9-90 (Ubuntu Pro) | Sep 21, 2023 | Sep 20, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 20, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub