The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory, causing `named` to terminate unexpectedly. Since each incoming control channel message is fully parsed before its contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key; only network access to the control channel's configured TCP port is necessary. This issue affects BIND 9 versions 9.2.0 through 9.16.43, 9.18.0 through 9.18.18, 9.19.0 through 9.19.16, 9.9.3-S1 through 9.16.43-S1, and 9.18.0-S1 through 9.18.18-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-bindalma-upgrade-bind-chrootalma-upgrade-bind-develalma-upgrade-bind-dnssec-docalma-upgrade-bind-dnssec-utilsalma-upgrade-bind-docalma-upgrade-bind-export-develalma-upgrade-bind-export-libsalma-upgrade-bind-libsalma-upgrade-bind-libs-litealma-upgrade-bind-licensealma-upgrade-bind-lite-develalma-upgrade-bind-pkcs11alma-upgrade-bind-pkcs11-develalma-upgrade-bind-pkcs11-libsalma-upgrade-bind-pkcs11-utilsalma-upgrade-bind-sdbalma-upgrade-bind-sdb-chrootalma-upgrade-bind-utilsalma-upgrade-bind9.16alma-upgrade-bind9.16-chrootalma-upgrade-bind9.16-develalma-upgrade-bind9.16-dnssec-utilsalma-upgrade-bind9.16-docalma-upgrade-bind9.16-libsalma-upgrade-bind9.16-licensealma-upgrade-bind9.16-utilsalma-upgrade-python3-bindalma-upgrade-python3-bind9.16 | Oct 10, 2023 | Sep 20, 2023 | |
| Alpine Linux | alpine-linux-upgrade-bind | Mar 26, 2024 | Sep 20, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-bindamazon-linux-ami-2-upgrade-bind-chrootamazon-linux-ami-2-upgrade-bind-debuginfoamazon-linux-ami-2-upgrade-bind-develamazon-linux-ami-2-upgrade-bind-export-develamazon-linux-ami-2-upgrade-bind-export-libsamazon-linux-ami-2-upgrade-bind-libsamazon-linux-ami-2-upgrade-bind-libs-liteamazon-linux-ami-2-upgrade-bind-licenseamazon-linux-ami-2-upgrade-bind-lite-develamazon-linux-ami-2-upgrade-bind-pkcs11amazon-linux-ami-2-upgrade-bind-pkcs11-develamazon-linux-ami-2-upgrade-bind-pkcs11-libsamazon-linux-ami-2-upgrade-bind-pkcs11-utilsamazon-linux-ami-2-upgrade-bind-sdbamazon-linux-ami-2-upgrade-bind-sdb-chrootamazon-linux-ami-2-upgrade-bind-utils | Oct 6, 2023 | Sep 20, 2023 | |
| Amazon_linux | — | amazon-linux-upgrade-bind | Oct 7, 2023 | Sep 20, 2023 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-bindamazon-linux-2023-upgrade-bind-chrootamazon-linux-2023-upgrade-bind-debuginfoamazon-linux-2023-upgrade-bind-debugsourceamazon-linux-2023-upgrade-bind-develamazon-linux-2023-upgrade-bind-dlz-filesystemamazon-linux-2023-upgrade-bind-dlz-filesystem-debuginfoamazon-linux-2023-upgrade-bind-dlz-ldapamazon-linux-2023-upgrade-bind-dlz-ldap-debuginfoamazon-linux-2023-upgrade-bind-dlz-mysqlamazon-linux-2023-upgrade-bind-dlz-mysql-debuginfoamazon-linux-2023-upgrade-bind-dlz-sqlite3amazon-linux-2023-upgrade-bind-dlz-sqlite3-debuginfoamazon-linux-2023-upgrade-bind-dnssec-docamazon-linux-2023-upgrade-bind-dnssec-utilsamazon-linux-2023-upgrade-bind-dnssec-utils-debuginfoamazon-linux-2023-upgrade-bind-docamazon-linux-2023-upgrade-bind-libsamazon-linux-2023-upgrade-bind-libs-debuginfoamazon-linux-2023-upgrade-bind-licenseamazon-linux-2023-upgrade-bind-pkcs11amazon-linux-2023-upgrade-bind-pkcs11-debuginfoamazon-linux-2023-upgrade-bind-pkcs11-develamazon-linux-2023-upgrade-bind-pkcs11-libsamazon-linux-2023-upgrade-bind-pkcs11-libs-debuginfoamazon-linux-2023-upgrade-bind-pkcs11-utilsamazon-linux-2023-upgrade-bind-pkcs11-utils-debuginfoamazon-linux-2023-upgrade-bind-utilsamazon-linux-2023-upgrade-bind-utils-debuginfoamazon-linux-2023-upgrade-python3-bind | Feb 17, 2025 | Sep 20, 2023 | |
| Centos_linux | — | centos-upgrade-bindcentos-upgrade-bind-chrootcentos-upgrade-bind-debuginfocentos-upgrade-bind-develcentos-upgrade-bind-export-develcentos-upgrade-bind-export-libscentos-upgrade-bind-libscentos-upgrade-bind-libs-litecentos-upgrade-bind-licensecentos-upgrade-bind-lite-develcentos-upgrade-bind-pkcs11centos-upgrade-bind-pkcs11-develcentos-upgrade-bind-pkcs11-libscentos-upgrade-bind-pkcs11-utilscentos-upgrade-bind-sdbcentos-upgrade-bind-sdb-chrootcentos-upgrade-bind-utils | Oct 6, 2023 | Sep 20, 2023 |
| Debian | debian-upgrade-bind9 | Sep 25, 2023 | Sep 20, 2023 | |
| Dell Powerstore Dsa2024120 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Mar 26, 2024 | |
| Dell Powerstore Dsa2024158 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Apr 4, 2024 | |
| Dns Bind | upgrade-isc-bind-latest | Jan 29, 2024 | Sep 20, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-dhcp | Jan 10, 2024 | Sep 20, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-bindhuawei-euleros-2_0_sp11-upgrade-bind-chroothuawei-euleros-2_0_sp11-upgrade-bind-dnssec-dochuawei-euleros-2_0_sp11-upgrade-bind-dnssec-utilshuawei-euleros-2_0_sp11-upgrade-bind-libshuawei-euleros-2_0_sp11-upgrade-bind-licensehuawei-euleros-2_0_sp11-upgrade-bind-pkcs11huawei-euleros-2_0_sp11-upgrade-bind-pkcs11-libshuawei-euleros-2_0_sp11-upgrade-bind-pkcs11-utilshuawei-euleros-2_0_sp11-upgrade-bind-utilshuawei-euleros-2_0_sp11-upgrade-python3-bind | Jan 10, 2024 | Sep 20, 2023 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-dhcp | Mar 19, 2025 | Sep 20, 2023 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-dhcp | Apr 1, 2025 | Sep 20, 2023 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-bindhuawei-euleros-2_0_sp5-upgrade-bind-chroothuawei-euleros-2_0_sp5-upgrade-bind-libshuawei-euleros-2_0_sp5-upgrade-bind-libs-litehuawei-euleros-2_0_sp5-upgrade-bind-licensehuawei-euleros-2_0_sp5-upgrade-bind-pkcs11huawei-euleros-2_0_sp5-upgrade-bind-pkcs11-libshuawei-euleros-2_0_sp5-upgrade-bind-pkcs11-utilshuawei-euleros-2_0_sp5-upgrade-bind-utils | Feb 12, 2024 | Sep 20, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-bindhuawei-euleros-2_0_sp8-upgrade-bind-chroothuawei-euleros-2_0_sp8-upgrade-bind-export-develhuawei-euleros-2_0_sp8-upgrade-bind-export-libshuawei-euleros-2_0_sp8-upgrade-bind-libshuawei-euleros-2_0_sp8-upgrade-bind-libs-litehuawei-euleros-2_0_sp8-upgrade-bind-licensehuawei-euleros-2_0_sp8-upgrade-bind-pkcs11huawei-euleros-2_0_sp8-upgrade-bind-pkcs11-libshuawei-euleros-2_0_sp8-upgrade-bind-pkcs11-utilshuawei-euleros-2_0_sp8-upgrade-bind-utilshuawei-euleros-2_0_sp8-upgrade-python3-bind | Mar 13, 2024 | Sep 20, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-bindhuawei-euleros-2_0_sp9-upgrade-bind-chroothuawei-euleros-2_0_sp9-upgrade-bind-export-libshuawei-euleros-2_0_sp9-upgrade-bind-libshuawei-euleros-2_0_sp9-upgrade-bind-libs-litehuawei-euleros-2_0_sp9-upgrade-bind-pkcs11huawei-euleros-2_0_sp9-upgrade-bind-utilshuawei-euleros-2_0_sp9-upgrade-python3-bind | Jan 10, 2024 | Sep 20, 2023 | |
| Ibm Aix | ibm-aix-bind_advisory25 | Dec 19, 2023 | Sep 20, 2023 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Feb 20, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-bindoracle-linux-upgrade-bind9-16oracle-linux-upgrade-bind9-16-chrootoracle-linux-upgrade-bind9-16-develoracle-linux-upgrade-bind9-16-dnssec-utilsoracle-linux-upgrade-bind9-16-docoracle-linux-upgrade-bind9-16-libsoracle-linux-upgrade-bind9-16-licenseoracle-linux-upgrade-bind9-16-utilsoracle-linux-upgrade-bind-chrootoracle-linux-upgrade-bind-develoracle-linux-upgrade-bind-dnssec-docoracle-linux-upgrade-bind-dnssec-utilsoracle-linux-upgrade-bind-docoracle-linux-upgrade-bind-export-develoracle-linux-upgrade-bind-export-libsoracle-linux-upgrade-bind-libsoracle-linux-upgrade-bind-libs-liteoracle-linux-upgrade-bind-licenseoracle-linux-upgrade-bind-lite-develoracle-linux-upgrade-bind-pkcs11oracle-linux-upgrade-bind-pkcs11-develoracle-linux-upgrade-bind-pkcs11-libsoracle-linux-upgrade-bind-pkcs11-utilsoracle-linux-upgrade-bind-sdboracle-linux-upgrade-bind-sdb-chrootoracle-linux-upgrade-bind-utilsoracle-linux-upgrade-python3-bindoracle-linux-upgrade-python3-bind9-16 | Oct 7, 2023 | Sep 20, 2023 |
| Redhat_linux | redhat-upgrade-bindredhat-upgrade-bind-chrootredhat-upgrade-bind-debuginforedhat-upgrade-bind-debugsourceredhat-upgrade-bind-develredhat-upgrade-bind-dnssec-docredhat-upgrade-bind-dnssec-utilsredhat-upgrade-bind-dnssec-utils-debuginforedhat-upgrade-bind-docredhat-upgrade-bind-export-develredhat-upgrade-bind-export-libsredhat-upgrade-bind-export-libs-debuginforedhat-upgrade-bind-libsredhat-upgrade-bind-libs-debuginforedhat-upgrade-bind-libs-literedhat-upgrade-bind-libs-lite-debuginforedhat-upgrade-bind-licenseredhat-upgrade-bind-lite-develredhat-upgrade-bind-pkcs11redhat-upgrade-bind-pkcs11-debuginforedhat-upgrade-bind-pkcs11-develredhat-upgrade-bind-pkcs11-libsredhat-upgrade-bind-pkcs11-libs-debuginforedhat-upgrade-bind-pkcs11-utilsredhat-upgrade-bind-pkcs11-utils-debuginforedhat-upgrade-bind-sdbredhat-upgrade-bind-sdb-chrootredhat-upgrade-bind-sdb-debuginforedhat-upgrade-bind-utilsredhat-upgrade-bind-utils-debuginforedhat-upgrade-bind9-16redhat-upgrade-bind9-16-chrootredhat-upgrade-bind9-16-debuginforedhat-upgrade-bind9-16-debugsourceredhat-upgrade-bind9-16-develredhat-upgrade-bind9-16-dnssec-utilsredhat-upgrade-bind9-16-dnssec-utils-debuginforedhat-upgrade-bind9-16-docredhat-upgrade-bind9-16-libsredhat-upgrade-bind9-16-libs-debuginforedhat-upgrade-bind9-16-licenseredhat-upgrade-bind9-16-utilsredhat-upgrade-bind9-16-utils-debuginforedhat-upgrade-python3-bindredhat-upgrade-python3-bind9-16 | Oct 6, 2023 | Sep 20, 2023 | |
| Suse | — | suse-upgrade-bindsuse-upgrade-bind-chrootenvsuse-upgrade-bind-develsuse-upgrade-bind-devel-32bitsuse-upgrade-bind-docsuse-upgrade-bind-utilssuse-upgrade-libbind9-1600suse-upgrade-libbind9-1600-32bitsuse-upgrade-libbind9-161suse-upgrade-libdns1110suse-upgrade-libdns1605suse-upgrade-libdns1605-32bitsuse-upgrade-libirs-develsuse-upgrade-libirs1601suse-upgrade-libirs1601-32bitsuse-upgrade-libirs161suse-upgrade-libisc1107suse-upgrade-libisc1107-32bitsuse-upgrade-libisc1606suse-upgrade-libisc1606-32bitsuse-upgrade-libisccc1600suse-upgrade-libisccc1600-32bitsuse-upgrade-libisccc161suse-upgrade-libisccfg1600suse-upgrade-libisccfg1600-32bitsuse-upgrade-libisccfg163suse-upgrade-liblwres161suse-upgrade-libns1604suse-upgrade-libns1604-32bitsuse-upgrade-python-bindsuse-upgrade-python3-bind | Sep 25, 2023 | Sep 20, 2023 |
| Ubuntu | ubuntu-pro-upgrade-bind9ubuntu-pro-upgrade-libbind9-140ubuntu-pro-upgrade-libbind9-160ubuntu-pro-upgrade-libbind9-90ubuntu-upgrade-bind9 | Sep 21, 2023 | Sep 20, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Sep 20, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub