Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind9.18-chrootUpgrade bind9.18-libsUpgrade bind9.18-develUpgrade bind9.18-docUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-utilsUpgrade bind9.18 | Feb 25, 2025 | Jan 29, 2025 |
| Alpine Linux | — | Upgrade bind | Aug 8, 2025 | Jan 29, 2025 |
| Amazon Linux Ami 2 | — | Upgrade bind-lite-develUpgrade bind-licenseUpgrade bindUpgrade bind-pkcs11Upgrade bind-sdbUpgrade bind-debuginfoUpgrade bind-export-develUpgrade bind-export-libsUpgrade bind-libs-liteUpgrade bind-chrootUpgrade bind-develUpgrade bind-utilsUpgrade bind-pkcs11-develUpgrade bind-pkcs11-libsUpgrade bind-sdb-chrootUpgrade bind-pkcs11-utilsUpgrade bind-libs | Feb 5, 2025 | Jan 29, 2025 |
| Amazon_linux_2023 | — | Upgrade bind-libs-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-docUpgrade bindUpgrade bind-utils-debuginfoUpgrade bind-licenseUpgrade bind-libsUpgrade bind-debugsourceUpgrade bind-utilsUpgrade bind-debuginfoUpgrade bind-chrootUpgrade bind-dnssec-utilsUpgrade bind-devel | Feb 17, 2025 | Jan 29, 2024 |
| Debian | — | Upgrade bind9 | Jan 31, 2025 | Jan 31, 2025 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Feb 11, 2025 | Jan 29, 2025 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory28 | May 21, 2025 | Jan 29, 2025 |
| Oracle_linux | — | Upgrade bind9.18-chrootUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-docUpgrade bind9.18-develUpgrade bind9.18-libsUpgrade bind9.18-utilsUpgrade bind9.18 | Feb 25, 2025 | Jan 29, 2024 |
| Redhat Openshift | — | Upgrade rhcos | Mar 6, 2025 | Jan 29, 2024 |
| Redhat_linux | — | Upgrade bind9.18-develUpgrade bind9.18-debugsourceUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-debuginfoUpgrade bind9.18-utils-debuginfoUpgrade bind9.18-utilsUpgrade bind9.18-libsUpgrade bind9.18-chrootUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind9.18Upgrade bind9.18-libs-debuginfoUpgrade bind9.18-doc | Feb 20, 2025 | Jan 29, 2025 |
| Rocky_linux | — | Upgrade bind9.18Upgrade bind9.18-chrootUpgrade bind9.18-libsUpgrade bind9.18-libs-debuginfoUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind9.18-utilsUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-develUpgrade bind9.18-utils-debuginfoUpgrade bind9.18-debuginfoUpgrade bind9.18-debugsource | Mar 18, 2025 | Jan 29, 2025 |
| Suse | — | Upgrade bind-modules-genericUpgrade bind-modules-sqlite3Upgrade bindUpgrade bind-modules-ldapUpgrade bind-modules-perlUpgrade bind-docUpgrade bind-modules-mysqlUpgrade bind-utils | Dec 5, 2025 | May 30, 2025 |
| Ubuntu | — | Upgrade bind9 | Jan 30, 2025 | Jan 29, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub