Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind9.18-utilsUpgrade bind9.18Upgrade bind9.18-develUpgrade bind9.18-docUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-libsUpgrade bind9.18-chroot | Feb 25, 2025 | Jan 29, 2025 |
| Alpine Linux | — | Upgrade bind | Aug 8, 2025 | Jan 29, 2025 |
| Amazon Linux Ami 2 | — | Upgrade bind-develUpgrade bind-pkcs11-develUpgrade bind-pkcs11-utilsUpgrade bind-sdb-chrootUpgrade bind-pkcs11-libsUpgrade bind-utilsUpgrade bind-libsUpgrade bind-licenseUpgrade bind-libs-liteUpgrade bind-chrootUpgrade bind-pkcs11Upgrade bind-debuginfoUpgrade bind-lite-develUpgrade bind-sdbUpgrade bind-export-develUpgrade bind-export-libsUpgrade bind | Feb 5, 2025 | Jan 29, 2025 |
| Amazon_linux_2023 | — | Upgrade bind-utilsUpgrade bind-debuginfoUpgrade bind-chrootUpgrade bind-develUpgrade bind-dnssec-utilsUpgrade bind-utils-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-debugsourceUpgrade bind-docUpgrade bind-licenseUpgrade bindUpgrade bind-dnssec-utils-debuginfoUpgrade bind-libs | Feb 17, 2025 | Jan 29, 2024 |
| Debian | — | Upgrade bind9 | Jan 31, 2025 | Jan 31, 2025 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 11, 2025 | Jan 29, 2025 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory28 | May 21, 2025 | Jan 29, 2025 |
| Oracle_linux | — | Upgrade bind9.18-utilsUpgrade bind9.18-libsUpgrade bind9.18Upgrade bind9.18-develUpgrade bind9.18-chrootUpgrade bind9.18-docUpgrade bind9.18-dnssec-utils | Feb 25, 2025 | Jan 29, 2024 |
| Redhat Openshift | — | Upgrade rhcos | Mar 6, 2025 | Jan 29, 2024 |
| Redhat_linux | — | Upgrade bind9.18-debuginfoUpgrade bind9.18-develUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-debugsourceUpgrade bind9.18-utilsUpgrade bind9.18-utils-debuginfoUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind9.18-chrootUpgrade bind9.18Upgrade bind9.18-libsUpgrade bind9.18-docUpgrade bind9.18-libs-debuginfo | Feb 20, 2025 | Jan 29, 2025 |
| Rocky_linux | — | Upgrade bind9.18-debuginfoUpgrade bind9.18-utils-debuginfoUpgrade bind9.18-develUpgrade bind9.18-utilsUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind9.18-debugsourceUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-chrootUpgrade bind9.18-libs-debuginfoUpgrade bind9.18Upgrade bind9.18-libs | Mar 18, 2025 | Jan 29, 2025 |
| Suse | — | Upgrade bind-modules-mysqlUpgrade bind-utilsUpgrade bind-docUpgrade bind-modules-perlUpgrade bind-modules-genericUpgrade bind-modules-ldapUpgrade bind-modules-sqlite3Upgrade bind | Dec 5, 2025 | May 30, 2025 |
| Ubuntu | — | Upgrade bind9 | Jan 30, 2025 | Jan 29, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub