Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind9.18-docUpgrade bind9.18-develUpgrade bind9.18-chrootUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-libsUpgrade bind9.18Upgrade bind9.18-utils | Feb 25, 2025 | Jan 29, 2025 |
| Alpine Linux | — | Upgrade bind | Aug 8, 2025 | Jan 29, 2025 |
| Amazon Linux Ami 2 | — | Upgrade bind-pkcs11Upgrade bindUpgrade bind-export-develUpgrade bind-chrootUpgrade bind-export-libsUpgrade bind-debuginfoUpgrade bind-lite-develUpgrade bind-libs-liteUpgrade bind-licenseUpgrade bind-sdbUpgrade bind-libsUpgrade bind-develUpgrade bind-pkcs11-utilsUpgrade bind-sdb-chrootUpgrade bind-pkcs11-develUpgrade bind-utilsUpgrade bind-pkcs11-libs | Feb 5, 2025 | Jan 29, 2025 |
| Amazon_linux_2023 | — | Upgrade bind-libsUpgrade bind-dnssec-utils-debuginfoUpgrade bind-licenseUpgrade bind-docUpgrade bind-utils-debuginfoUpgrade bindUpgrade bind-libs-debuginfoUpgrade bind-debugsourceUpgrade bind-dnssec-utilsUpgrade bind-utilsUpgrade bind-debuginfoUpgrade bind-chrootUpgrade bind-devel | Feb 17, 2025 | Jan 29, 2024 |
| Debian | — | Upgrade bind9 | Jan 31, 2025 | Jan 31, 2025 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 11, 2025 | Jan 29, 2025 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory28 | May 21, 2025 | Jan 29, 2025 |
| Oracle_linux | — | Upgrade bind9.18Upgrade bind9.18-libsUpgrade bind9.18-utilsUpgrade bind9.18-chrootUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-docUpgrade bind9.18-devel | Feb 25, 2025 | Jan 29, 2024 |
| Redhat Openshift | — | Upgrade rhcos | Mar 6, 2025 | Jan 29, 2025 |
| Redhat_linux | — | Upgrade bind9.18-utilsUpgrade bind9.18-develUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-debuginfoUpgrade bind9.18-utils-debuginfoUpgrade bind9.18-debugsourceUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind9.18Upgrade bind9.18-docUpgrade bind9.18-libsUpgrade bind9.18-chrootUpgrade bind9.18-libs-debuginfo | Feb 20, 2025 | Jan 29, 2025 |
| Rocky_linux | — | Upgrade bind9.18Upgrade bind9.18-libsUpgrade bind9.18-libs-debuginfoUpgrade bind9.18-chrootUpgrade bind9.18-debugsourceUpgrade bind9.18-debuginfoUpgrade bind9.18-develUpgrade bind9.18-utils-debuginfoUpgrade bind9.18-utilsUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-dnssec-utils-debuginfo | Mar 18, 2025 | Jan 29, 2025 |
| Suse | — | Upgrade bind-modules-ldapUpgrade bind-modules-sqlite3Upgrade bindUpgrade bind-modules-genericUpgrade bind-modules-mysqlUpgrade bind-modules-perlUpgrade bind-utilsUpgrade bind-doc | Dec 5, 2025 | May 30, 2025 |
| Ubuntu | — | Upgrade bind9 | Jan 30, 2025 | Jan 29, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub