If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by sending a stream of SIG(0) signed requests. This issue affects BIND 9 versions 9.0.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.49-S1, and 9.18.11-S1 through 9.18.27-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind9.16-licenseUpgrade bindUpgrade bind-libs-liteUpgrade bind-dnssec-docUpgrade bind-dnssec-utilsUpgrade bind-licenseUpgrade bind-pkcs11-utilsUpgrade bind-export-develUpgrade bind-chrootUpgrade bind-sdb-chrootUpgrade bind-lite-develUpgrade bind-export-libsUpgrade bind9.16-docUpgrade bind-develUpgrade python3-bindUpgrade bind-utilsUpgrade bind9.16-libsUpgrade python3-bind9.16Upgrade bind9.16-develUpgrade bind-pkcs11Upgrade bind9.16-chrootUpgrade bind-libsUpgrade bind-sdbUpgrade bind-pkcs11-develUpgrade bind9.16Upgrade bind-dyndb-ldapUpgrade bind9.16-dnssec-utilsUpgrade bind-pkcs11-libsUpgrade bind9.16-utilsUpgrade bind-doc | Aug 22, 2024 | Jul 23, 2024 |
| Alpine Linux | — | Upgrade bind | Aug 8, 2025 | Jul 23, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bind-pkcs11-utilsUpgrade bind-utilsUpgrade bind-develUpgrade bind-chrootUpgrade bind-libs-liteUpgrade bind-libsUpgrade bind-pkcs11Upgrade bind-debuginfoUpgrade bind-sdb-chrootUpgrade bind-pkcs11-libsUpgrade bind-export-develUpgrade bind-licenseUpgrade bind-lite-develUpgrade bindUpgrade bind-export-libsUpgrade bind-pkcs11-develUpgrade bind-sdb | Aug 14, 2024 | Jul 23, 2024 |
| Amazon_linux_2023 | — | Upgrade bind-licenseUpgrade bind-dnssec-utils-debuginfoUpgrade bind-dlz-sqlite3Upgrade bind-dnssec-utilsUpgrade bind-dlz-mysqlUpgrade bindUpgrade bind-dlz-mysql-debuginfoUpgrade bind-dlz-ldapUpgrade bind-dlz-sqlite3-debuginfoUpgrade bind-debuginfoUpgrade bind-docUpgrade bind-debugsourceUpgrade bind-libs-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-utilsUpgrade bind-develUpgrade bind-libsUpgrade bind-dlz-ldap-debuginfoUpgrade bind-dlz-filesystemUpgrade bind-chrootUpgrade bind-dlz-filesystem-debuginfo | Feb 17, 2025 | Jul 23, 2024 |
| Debian | — | Upgrade bind9 | Jul 29, 2024 | Jul 23, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jan 28, 2025 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jul 24, 2024 | Jul 24, 2024 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 23, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade bind-pkcs11Upgrade bind-export-libsUpgrade bind-libs-liteUpgrade bind-libsUpgrade bind-utilsUpgrade bind-dyndb-ldapUpgrade bind-chrootUpgrade bind | Jan 14, 2025 | Jul 23, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade dhcp | Oct 9, 2024 | Jul 23, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bind-pkcs11-libsUpgrade bind-chrootUpgrade bind-libsUpgrade bind-pkcs11Upgrade bindUpgrade bind-utilsUpgrade bind-dnssec-utilsUpgrade bind-licenseUpgrade bind-pkcs11-utilsUpgrade bind-dnssec-docUpgrade python3-bind | Oct 9, 2024 | Jul 23, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade dhcp | Jan 15, 2025 | Jul 23, 2024 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory27 | Nov 19, 2024 | Jul 23, 2024 |
| Oracle_linux | — | Upgrade bind9.16-dnssec-utilsUpgrade bind9.16Upgrade bind-chrootUpgrade bind-libsUpgrade bind-sdbUpgrade python3-bind9.16Upgrade bind-dyndb-ldapUpgrade bindUpgrade bind9.16-chrootUpgrade bind-utilsUpgrade bind-docUpgrade bind-pkcs11Upgrade bind-lite-develUpgrade bind9.16-utilsUpgrade bind9.16-develUpgrade bind-dnssec-docUpgrade bind-pkcs11-libsUpgrade bind-export-develUpgrade bind9.16-licenseUpgrade bind-sdb-chrootUpgrade bind-pkcs11-develUpgrade python3-bindUpgrade bind-pkcs11-utilsUpgrade bind-licenseUpgrade bind-libs-liteUpgrade bind9.16-libsUpgrade bind-dnssec-utilsUpgrade bind9.16-docUpgrade bind-export-libsUpgrade bind-devel | Oct 16, 2024 | Jul 23, 2024 |
| Redhat Openshift | — | Upgrade rhcos | Sep 5, 2024 | Jul 23, 2024 |
| Redhat_linux | — | Upgrade bind-docUpgrade bind-export-develUpgrade bind-sdbUpgrade bind-lite-develUpgrade python3-bind9.16Upgrade bind9.16-libsUpgrade bind9.16-docUpgrade bind9.16-utilsUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-export-libsUpgrade bind-dyndb-ldap-debuginfoUpgrade bind9.16-develUpgrade bindUpgrade bind-libs-lite-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade bind-debugsourceUpgrade bind-dyndb-ldapUpgrade bind-chrootUpgrade bind-dnssec-docUpgrade bind-debuginfoUpgrade bind-utilsUpgrade bind-dnssec-utils-debuginfoUpgrade bind9.16-chrootUpgrade bind-libs-debuginfoUpgrade bind-pkcs11-develUpgrade bind-dnssec-utilsUpgrade bind-pkcs11-libsUpgrade bind-sdb-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade bind9.16-debugsourceUpgrade bind-export-libs-debuginfoUpgrade bind-pkcs11Upgrade bind9.16Upgrade bind-develUpgrade bind-sdb-chrootUpgrade bind9.16-libs-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade python3-bindUpgrade bind-libs-liteUpgrade bind9.16-licenseUpgrade bind-libsUpgrade bind-licenseUpgrade bind9.16-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-pkcs11-utils | Aug 22, 2024 | Jul 23, 2024 |
| Rocky_linux | — | Upgrade bind-utilsUpgrade bind9.16-libsUpgrade bind-pkcs11-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-lite-develUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-export-libsUpgrade bind-libs-liteUpgrade bind-dnssec-utilsUpgrade bind-dyndb-ldapUpgrade bind-chrootUpgrade bind9.16-debugsourceUpgrade bind-dyndb-ldap-debuginfoUpgrade bind9.16-develUpgrade bind9.16-debuginfoUpgrade bind-pkcs11-develUpgrade bindUpgrade bind9.16-chrootUpgrade bind-export-develUpgrade bind-develUpgrade bind-debugsourceUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-pkcs11Upgrade bind9.16Upgrade bind-sdbUpgrade bind-export-libs-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind-utils-debuginfoUpgrade bind9.16-utilsUpgrade bind-libs-lite-debuginfoUpgrade bind-sdb-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-sdb-chrootUpgrade bind-debuginfoUpgrade bind-libsUpgrade bind9.16-dnssec-utils | Aug 22, 2024 | Jul 23, 2024 |
| Suse | — | Upgrade bind-modules-sqlite3Upgrade bind-docUpgrade bind-modules-genericUpgrade libisccfg1600Upgrade libbind9-161Upgrade libirs-develUpgrade libns1604Upgrade bind-modules-mysqlUpgrade libbind9-1600Upgrade libisccfg163Upgrade bind-utilsUpgrade libisc1606Upgrade libisccc1600Upgrade libirs1601Upgrade libdns1605Upgrade bindUpgrade bind-chrootenvUpgrade libdns1110Upgrade python3-bindUpgrade libirs161Upgrade python-bindUpgrade bind-modules-perlUpgrade libisc1107-32bitUpgrade libisccc161Upgrade bind-modules-ldapUpgrade liblwres161Upgrade libisc1107Upgrade bind-devel | Jul 31, 2024 | Jul 23, 2024 |
| Ubuntu | — | Upgrade bind9 (Ubuntu Pro)Upgrade bind9 | Jul 24, 2024 | Jul 23, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 23, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub