The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory, causing `named` to terminate unexpectedly. Since each incoming control channel message is fully parsed before its contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key; only network access to the control channel's configured TCP port is necessary. This issue affects BIND 9 versions 9.2.0 through 9.16.43, 9.18.0 through 9.18.18, 9.19.0 through 9.19.16, 9.9.3-S1 through 9.16.43-S1, and 9.18.0-S1 through 9.18.18-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind9.16-develUpgrade bind-licenseUpgrade bind-develUpgrade bind-libsUpgrade bind9.16Upgrade bind9.16-utilsUpgrade bind-sdb-chrootUpgrade bind-utilsUpgrade python3-bindUpgrade bind9.16-licenseUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-develUpgrade bind9.16-libsUpgrade bindUpgrade bind-pkcs11Upgrade bind-export-libsUpgrade bind-pkcs11-utilsUpgrade python3-bind9.16Upgrade bind9.16-docUpgrade bind9.16-dnssec-utilsUpgrade bind-chrootUpgrade bind9.16-chrootUpgrade bind-dnssec-docUpgrade bind-export-develUpgrade bind-sdbUpgrade bind-lite-develUpgrade bind-docUpgrade bind-libs-liteUpgrade bind-dnssec-utils | Oct 10, 2023 | Sep 20, 2023 |
| Alpine Linux | — | Upgrade bind | Mar 26, 2024 | Sep 20, 2023 |
| Amazon Linux Ami 2 | — | Upgrade bind-licenseUpgrade bind-export-libsUpgrade bind-develUpgrade bind-pkcs11Upgrade bind-sdb-chrootUpgrade bind-export-develUpgrade bind-pkcs11-develUpgrade bindUpgrade bind-lite-develUpgrade bind-pkcs11-libsUpgrade bind-libsUpgrade bind-debuginfoUpgrade bind-utilsUpgrade bind-sdbUpgrade bind-chrootUpgrade bind-pkcs11-utilsUpgrade bind-libs-lite | Oct 6, 2023 | Sep 20, 2023 |
| Amazon_linux | — | Upgrade bind | Oct 7, 2023 | Sep 20, 2023 |
| Amazon_linux_2023 | — | Upgrade bind-debugsourceUpgrade bind-utils-debuginfoUpgrade bind-dlz-ldap-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-dlz-ldapUpgrade bind-pkcs11-debuginfoUpgrade bind-chrootUpgrade bind-dnssec-docUpgrade bind-dnssec-utilsUpgrade bind-utilsUpgrade bind-pkcs11-utilsUpgrade bind-dlz-mysql-debuginfoUpgrade bind-docUpgrade bind-dlz-filesystemUpgrade bind-dlz-filesystem-debuginfoUpgrade bind-dlz-mysqlUpgrade bind-debuginfoUpgrade python3-bindUpgrade bind-pkcs11Upgrade bind-pkcs11-develUpgrade bind-licenseUpgrade bind-libsUpgrade bind-libs-debuginfoUpgrade bind-dlz-sqlite3-debuginfoUpgrade bind-dlz-sqlite3Upgrade bind-pkcs11-utils-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-develUpgrade bind-pkcs11-libs-debuginfoUpgrade bind | Feb 17, 2025 | Sep 20, 2023 |
| Centos_linux | — | Upgrade bind-licenseUpgrade bind-pkcs11-develUpgrade bindUpgrade bind-sdb-chrootUpgrade bind-libsUpgrade bind-export-develUpgrade bind-export-libsUpgrade bind-pkcs11Upgrade bind-chrootUpgrade bind-lite-develUpgrade bind-pkcs11-libsUpgrade bind-libs-liteUpgrade bind-pkcs11-utilsUpgrade bind-develUpgrade bind-debuginfoUpgrade bind-utilsUpgrade bind-sdb | Oct 6, 2023 | Sep 20, 2023 |
| Debian | — | Upgrade bind9 | Sep 25, 2023 | Sep 20, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jan 29, 2024 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade dhcp | Jan 10, 2024 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bind-pkcs11Upgrade bind-dnssec-docUpgrade bind-libsUpgrade bind-dnssec-utilsUpgrade bind-chrootUpgrade bind-pkcs11-utilsUpgrade bindUpgrade bind-licenseUpgrade bind-utilsUpgrade bind-pkcs11-libsUpgrade python3-bind | Jan 10, 2024 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade dhcp | Mar 19, 2025 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp13 | — | Upgrade dhcp | Apr 1, 2025 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade bind-pkcs11-libsUpgrade bind-utilsUpgrade bind-chrootUpgrade bind-libs-liteUpgrade bindUpgrade bind-pkcs11Upgrade bind-libsUpgrade bind-licenseUpgrade bind-pkcs11-utils | Feb 12, 2024 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bind-libsUpgrade bind-export-develUpgrade bind-licenseUpgrade bind-libs-liteUpgrade bind-export-libsUpgrade bind-pkcs11-utilsUpgrade bind-utilsUpgrade bind-chrootUpgrade bind-pkcs11Upgrade bindUpgrade python3-bindUpgrade bind-pkcs11-libs | Mar 13, 2024 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade bind-libsUpgrade bindUpgrade bind-chrootUpgrade bind-pkcs11Upgrade bind-utilsUpgrade bind-libs-liteUpgrade python3-bindUpgrade bind-export-libs | Jan 10, 2024 | Sep 20, 2023 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory25 | Dec 19, 2023 | Sep 20, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Feb 20, 2024 |
| Oracle_linux | — | Upgrade bind-sdb-chrootUpgrade bind-licenseUpgrade bind-libsUpgrade python3-bindUpgrade bind-develUpgrade bind-pkcs11-develUpgrade bind-export-develUpgrade bind-pkcs11Upgrade bind9.16Upgrade bind9.16-libsUpgrade bind9.16-chrootUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-utilsUpgrade bind-dnssec-utilsUpgrade bind9.16-licenseUpgrade bind-export-libsUpgrade bind-libs-liteUpgrade bind9.16-develUpgrade python3-bind9.16Upgrade bind-sdbUpgrade bind-docUpgrade bind9.16-docUpgrade bind-dnssec-docUpgrade bind-lite-develUpgrade bind-utilsUpgrade bind9.16-utilsUpgrade bindUpgrade bind9.16-dnssec-utilsUpgrade bind-chroot | Oct 7, 2023 | Sep 20, 2023 |
| Redhat_linux | — | Upgrade bind9.16-debugsourceUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11Upgrade bind-libs-debuginfoUpgrade bind-sdb-chrootUpgrade bind-libsUpgrade bind-licenseUpgrade bind9.16-utils-debuginfoUpgrade python3-bindUpgrade bind-export-libs-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-pkcs11-libsUpgrade bind9.16-debuginfoUpgrade bind-pkcs11-develUpgrade bind9.16-libs-debuginfoUpgrade bind-sdb-debuginfoUpgrade bind-develUpgrade bind9.16-chrootUpgrade bind9.16-licenseUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind9.16Upgrade bind-utilsUpgrade bind-libs-liteUpgrade bind-export-libsUpgrade bind-debuginfoUpgrade bind-dnssec-utilsUpgrade python3-bind9.16Upgrade bind9.16-utilsUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-sdbUpgrade bind-lite-develUpgrade bind-pkcs11-utils-debuginfoUpgrade bind9.16-libsUpgrade bind9.16-develUpgrade bindUpgrade bind-export-develUpgrade bind9.16-docUpgrade bind9.16-dnssec-utilsUpgrade bind-docUpgrade bind-debugsourceUpgrade bind-dnssec-docUpgrade bind-utils-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bind-chroot | Oct 6, 2023 | Sep 20, 2023 |
| Rocky_linux | — | — | Aug 15, 2024 | Sep 20, 2023 |
| Suse | — | Upgrade libbind9-1600-32bitUpgrade bind-chrootenvUpgrade libisccfg1600-32bitUpgrade libdns1605-32bitUpgrade bindUpgrade libirs-develUpgrade python3-bindUpgrade libisccc1600-32bitUpgrade libbind9-1600Upgrade bind-develUpgrade libdns1605Upgrade liblwres161Upgrade libisc1606Upgrade libisc1107Upgrade python-bindUpgrade libisccc161Upgrade libisccfg163Upgrade libns1604Upgrade bind-devel-32bitUpgrade libisc1107-32bitUpgrade bind-utilsUpgrade libirs1601-32bitUpgrade libisccfg1600Upgrade libisc1606-32bitUpgrade libirs161Upgrade libns1604-32bitUpgrade libirs1601Upgrade bind-docUpgrade libbind9-161Upgrade libisccc1600Upgrade libdns1110 | Sep 25, 2023 | Sep 20, 2023 |
| Ubuntu | — | Upgrade libbind9-160 (Ubuntu Pro)Upgrade libbind9-90 (Ubuntu Pro)Upgrade bind9 (Ubuntu Pro)Upgrade bind9Upgrade libbind9-140 (Ubuntu Pro) | Sep 21, 2023 | Sep 20, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 20, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub