If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by sending a stream of SIG(0) signed requests. This issue affects BIND 9 versions 9.0.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.49-S1, and 9.18.11-S1 through 9.18.27-S1.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-libs-liteUpgrade bind-dnssec-docUpgrade bind9.16-libsUpgrade bind-sdb-chrootUpgrade bind-pkcs11-utilsUpgrade bindUpgrade bind-dnssec-utilsUpgrade bind-chrootUpgrade bind-export-libsUpgrade bind-export-develUpgrade python3-bindUpgrade bind9.16-docUpgrade bind-licenseUpgrade bind-lite-develUpgrade bind-utilsUpgrade bind-develUpgrade bind9.16-licenseUpgrade bind-pkcs11-develUpgrade bind-dyndb-ldapUpgrade bind-pkcs11-libsUpgrade bind9.16-utilsUpgrade bind9.16-chrootUpgrade bind9.16-dnssec-utilsUpgrade bind-sdbUpgrade bind-pkcs11Upgrade bind-docUpgrade python3-bind9.16Upgrade bind-libsUpgrade bind9.16Upgrade bind9.16-devel | Aug 22, 2024 | Jul 23, 2024 |
| Alpine Linux | — | Upgrade bind | Aug 8, 2025 | Jul 23, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bind-lite-develUpgrade bind-licenseUpgrade bind-export-develUpgrade bind-develUpgrade bind-utilsUpgrade bind-pkcs11Upgrade bind-sdb-chrootUpgrade bind-libsUpgrade bind-libs-liteUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11-libsUpgrade bind-chrootUpgrade bind-debuginfoUpgrade bind-sdbUpgrade bind-pkcs11-develUpgrade bindUpgrade bind-export-libs | Aug 14, 2024 | Jul 23, 2024 |
| Amazon_linux_2023 | — | Upgrade bind-libsUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-develUpgrade bind-dlz-filesystem-debuginfoUpgrade bind-dlz-filesystemUpgrade bind-dlz-ldap-debuginfoUpgrade bind-dlz-sqlite3Upgrade bind-dlz-mysql-debuginfoUpgrade bind-dlz-mysqlUpgrade bind-libs-debuginfoUpgrade bind-debugsourceUpgrade bind-utils-debuginfoUpgrade bindUpgrade bind-debuginfoUpgrade bind-dlz-sqlite3-debuginfoUpgrade bind-docUpgrade bind-dlz-ldapUpgrade bind-licenseUpgrade bind-dnssec-utils-debuginfoUpgrade bind-dnssec-utils | Feb 17, 2025 | Jul 23, 2024 |
| Debian | — | Upgrade bind9 | Jul 29, 2024 | Jul 23, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jan 28, 2025 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jul 24, 2024 | Jul 24, 2024 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 23, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade bind-pkcs11Upgrade bind-export-libsUpgrade bind-libs-liteUpgrade bind-dyndb-ldapUpgrade bind-utilsUpgrade bind-libsUpgrade bind-chrootUpgrade bind | Jan 14, 2025 | Jul 23, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade dhcp | Oct 9, 2024 | Jul 23, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bind-chrootUpgrade bind-pkcs11Upgrade bind-pkcs11-libsUpgrade bind-libsUpgrade bindUpgrade bind-dnssec-utilsUpgrade bind-licenseUpgrade bind-utilsUpgrade bind-dnssec-docUpgrade bind-pkcs11-utilsUpgrade python3-bind | Oct 9, 2024 | Jul 23, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade dhcp | Jan 15, 2025 | Jul 23, 2024 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory27 | Nov 19, 2024 | Jul 23, 2024 |
| Oracle_linux | — | Upgrade bind9.16-chrootUpgrade bind-dnssec-docUpgrade python3-bind9.16Upgrade bind-dyndb-ldapUpgrade bind-sdbUpgrade bind9.16-develUpgrade bind9.16-utilsUpgrade bind9.16Upgrade bind-docUpgrade bind-pkcs11-libsUpgrade bind-utilsUpgrade bind9.16-dnssec-utilsUpgrade bind-pkcs11Upgrade bind-libsUpgrade bind-chrootUpgrade bind-lite-develUpgrade bindUpgrade python3-bindUpgrade bind9.16-docUpgrade bind-export-libsUpgrade bind-licenseUpgrade bind-libs-liteUpgrade bind-develUpgrade bind-sdb-chrootUpgrade bind-pkcs11-develUpgrade bind-export-develUpgrade bind9.16-libsUpgrade bind-dnssec-utilsUpgrade bind9.16-licenseUpgrade bind-pkcs11-utils | Oct 16, 2024 | Jul 23, 2024 |
| Redhat Openshift | — | Upgrade ose-rhel-coreos | Sep 5, 2024 | Jul 23, 2024 |
| Redhat_linux | — | Upgrade bind-pkcs11-debuginfoUpgrade bind-pkcs11-develUpgrade bind-sdb-chrootUpgrade bind9.16-licenseUpgrade bind-develUpgrade bind9.16-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind-libs-liteUpgrade python3-bindUpgrade bind9.16-chrootUpgrade bind-libsUpgrade bind-export-libs-debuginfoUpgrade bind-pkcs11Upgrade bind9.16Upgrade bind-libs-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-sdb-debuginfoUpgrade bind-pkcs11-libsUpgrade bind9.16-debugsourceUpgrade bind-licenseUpgrade bind-pkcs11-utilsUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-lite-develUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-export-develUpgrade bind-chrootUpgrade bind-pkcs11-utils-debuginfoUpgrade bind9.16-develUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-dnssec-docUpgrade bind-export-libsUpgrade python3-bind9.16Upgrade bind9.16-libsUpgrade bind9.16-utilsUpgrade bindUpgrade bind-utilsUpgrade bind9.16-dnssec-utilsUpgrade bind-dyndb-ldapUpgrade bind-docUpgrade bind-sdbUpgrade bind-utils-debuginfoUpgrade bind9.16-docUpgrade bind-dnssec-utils-debuginfoUpgrade bind-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-debugsourceUpgrade bind-libs-lite-debuginfo | Aug 22, 2024 | Jul 23, 2024 |
| Rocky_linux | — | Upgrade bind-utilsUpgrade bind9.16-debuginfoUpgrade bind9.16-debugsourceUpgrade bind-dnssec-utilsUpgrade bind-export-libsUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-dyndb-ldapUpgrade bind-libs-liteUpgrade bind-lite-develUpgrade bind-pkcs11-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-chrootUpgrade bind-pkcs11-utils-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind9.16-develUpgrade bind9.16-libsUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-develUpgrade bind9.16-utils-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-develUpgrade bind9.16-utilsUpgrade bind-sdb-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind-export-libs-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade bind-libsUpgrade bind-debuginfoUpgrade bind9.16-chrootUpgrade bindUpgrade bind-sdb-chrootUpgrade bind-dnssec-utils-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade bind9.16Upgrade bind-pkcs11Upgrade bind-debugsourceUpgrade bind-sdbUpgrade bind-utils-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bind-export-devel | Aug 22, 2024 | Jul 23, 2024 |
| Suse | — | Upgrade bind-modules-genericUpgrade bind-docUpgrade libirs1601Upgrade libisc1606Upgrade libbind9-161Upgrade bind-modules-sqlite3Upgrade bind-utilsUpgrade libns1604Upgrade libisccc1600Upgrade libbind9-1600Upgrade libisccfg1600Upgrade bind-modules-mysqlUpgrade libirs-develUpgrade libdns1605Upgrade libisccfg163Upgrade bind-chrootenvUpgrade python3-bindUpgrade bindUpgrade liblwres161Upgrade libisc1107Upgrade bind-modules-ldapUpgrade libisccc161Upgrade python-bindUpgrade bind-develUpgrade libirs161Upgrade libisc1107-32bitUpgrade bind-modules-perlUpgrade libdns1110 | Jul 31, 2024 | Jul 23, 2024 |
| Ubuntu | — | Upgrade bind9 (Ubuntu Pro)Upgrade bind9 | Jul 24, 2024 | Jul 23, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 23, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub