If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by sending a stream of SIG(0) signed requests. This issue affects BIND 9 versions 9.0.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.49-S1, and 9.18.11-S1 through 9.18.27-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-export-libsUpgrade bind-pkcs11-utilsUpgrade bind9.16-licenseUpgrade bindUpgrade python3-bindUpgrade bind-dnssec-docUpgrade bind-lite-develUpgrade bind-develUpgrade bind9.16-libsUpgrade bind-libs-liteUpgrade bind9.16-docUpgrade bind-sdb-chrootUpgrade bind-utilsUpgrade bind-chrootUpgrade bind-licenseUpgrade bind-dnssec-utilsUpgrade bind-export-develUpgrade python3-bind9.16Upgrade bind9.16-develUpgrade bind9.16-chrootUpgrade bind-sdbUpgrade bind-pkcs11Upgrade bind9.16-dnssec-utilsUpgrade bind-dyndb-ldapUpgrade bind9.16Upgrade bind-pkcs11-develUpgrade bind-pkcs11-libsUpgrade bind-docUpgrade bind9.16-utilsUpgrade bind-libs | Aug 22, 2024 | Jul 23, 2024 |
| Alpine Linux | — | Upgrade bind | Aug 8, 2025 | Jul 23, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bind-sdb-chrootUpgrade bind-libs-liteUpgrade bind-export-develUpgrade bind-develUpgrade bind-utilsUpgrade bind-debuginfoUpgrade bind-chrootUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-utilsUpgrade bind-lite-develUpgrade bind-licenseUpgrade bind-libsUpgrade bind-pkcs11Upgrade bind-pkcs11-develUpgrade bind-sdbUpgrade bind-export-libsUpgrade bind | Aug 14, 2024 | Jul 23, 2024 |
| Amazon_linux_2023 | — | Upgrade bind-chrootUpgrade bind-libsUpgrade bind-develUpgrade bind-dlz-filesystem-debuginfoUpgrade bind-dlz-ldap-debuginfoUpgrade bind-dlz-filesystemUpgrade bind-utilsUpgrade bind-licenseUpgrade bind-dnssec-utilsUpgrade bind-dlz-sqlite3Upgrade bind-dnssec-utils-debuginfoUpgrade bind-dlz-mysql-debuginfoUpgrade bind-debugsourceUpgrade bind-utils-debuginfoUpgrade bind-debuginfoUpgrade bindUpgrade bind-libs-debuginfoUpgrade bind-docUpgrade bind-dlz-sqlite3-debuginfoUpgrade bind-dlz-ldapUpgrade bind-dlz-mysql | Feb 17, 2025 | Jul 23, 2024 |
| Debian | — | Upgrade bind9 | Jul 29, 2024 | Jul 23, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jan 28, 2025 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jul 24, 2024 | Jul 24, 2024 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 23, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade bind-utilsUpgrade bind-dyndb-ldapUpgrade bindUpgrade bind-chrootUpgrade bind-libsUpgrade bind-pkcs11Upgrade bind-libs-liteUpgrade bind-export-libs | Jan 14, 2025 | Jul 23, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade dhcp | Oct 9, 2024 | Jul 23, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bind-pkcs11-libsUpgrade bindUpgrade bind-pkcs11Upgrade bind-libsUpgrade bind-chrootUpgrade python3-bindUpgrade bind-utilsUpgrade bind-dnssec-docUpgrade bind-dnssec-utilsUpgrade bind-pkcs11-utilsUpgrade bind-license | Oct 9, 2024 | Jul 23, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade dhcp | Jan 15, 2025 | Jul 23, 2024 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory27 | Nov 19, 2024 | Jul 23, 2024 |
| Oracle_linux | — | Upgrade bind-export-libsUpgrade bind9.16-docUpgrade bind-develUpgrade bind-dnssec-utilsUpgrade bind9.16-libsUpgrade bind-pkcs11-develUpgrade bind-sdb-chrootUpgrade bind-licenseUpgrade bind-libs-liteUpgrade bind9.16-licenseUpgrade python3-bindUpgrade bind-export-develUpgrade bind-pkcs11-utilsUpgrade bind-lite-develUpgrade bind-utilsUpgrade bind9.16Upgrade bind-sdbUpgrade bind9.16-develUpgrade python3-bind9.16Upgrade bind-dyndb-ldapUpgrade bindUpgrade bind-pkcs11Upgrade bind9.16-utilsUpgrade bind-docUpgrade bind-libsUpgrade bind-pkcs11-libsUpgrade bind-dnssec-docUpgrade bind-chrootUpgrade bind9.16-chrootUpgrade bind9.16-dnssec-utils | Oct 16, 2024 | Jul 23, 2024 |
| Redhat Openshift | — | Upgrade rhcos | Sep 5, 2024 | Jul 23, 2024 |
| Redhat_linux | — | Upgrade bind-utils-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-export-libsUpgrade bind-dnssec-docUpgrade bind-sdbUpgrade bind-dyndb-ldap-debuginfoUpgrade bind9.16-develUpgrade bind9.16-dnssec-utilsUpgrade bind-lite-develUpgrade bind-utilsUpgrade bind-export-develUpgrade bind-debugsourceUpgrade bind-dnssec-utils-debuginfoUpgrade bind-debuginfoUpgrade bind-chrootUpgrade python3-bind9.16Upgrade bind-pkcs11-libs-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bind-dyndb-ldapUpgrade bind-docUpgrade bind-pkcs11-utils-debuginfoUpgrade bindUpgrade bind9.16-docUpgrade bind9.16-utilsUpgrade bind9.16-libsUpgrade bind-sdb-debuginfoUpgrade bind-pkcs11Upgrade bind-libs-liteUpgrade bind9.16-chrootUpgrade bind-sdb-chrootUpgrade bind-export-libs-debuginfoUpgrade bind9.16-licenseUpgrade bind-libsUpgrade bind9.16-debuginfoUpgrade python3-bindUpgrade bind-licenseUpgrade bind9.16-debugsourceUpgrade bind-pkcs11-utilsUpgrade bind-libs-debuginfoUpgrade bind-develUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind-pkcs11-develUpgrade bind-pkcs11-libsUpgrade bind-dnssec-utilsUpgrade bind-pkcs11-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade bind9.16 | Aug 22, 2024 | Jul 23, 2024 |
| Rocky_linux | — | Upgrade bind9.16-debugsourceUpgrade bind-dnssec-utilsUpgrade bind-export-libsUpgrade bind-dyndb-ldapUpgrade bind9.16-debuginfoUpgrade bind-lite-develUpgrade bind-libs-liteUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind9.16-develUpgrade bind-pkcs11-libsUpgrade bind-chrootUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-utilsUpgrade bind-pkcs11-debuginfoUpgrade bind9.16-libsUpgrade bind9.16Upgrade bind-utils-debuginfoUpgrade bind-export-develUpgrade bind9.16-libs-debuginfoUpgrade bind-sdbUpgrade bind-pkcs11Upgrade bind-debugsourceUpgrade bind-dnssec-utils-debuginfoUpgrade bind-sdb-chrootUpgrade bind9.16-dnssec-utilsUpgrade bind9.16-utilsUpgrade bind-pkcs11-develUpgrade bind-libs-lite-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-sdb-debuginfoUpgrade bind-develUpgrade bind9.16-chrootUpgrade bindUpgrade bind-debuginfoUpgrade bind-libsUpgrade bind-export-libs-debuginfoUpgrade bind9.16-utils-debuginfo | Aug 22, 2024 | Jul 23, 2024 |
| Suse | — | Upgrade python-bindUpgrade libisc1107-32bitUpgrade libisc1107Upgrade liblwres161Upgrade libisccc161Upgrade libirs161Upgrade bind-modules-ldapUpgrade libdns1110Upgrade python3-bindUpgrade bind-develUpgrade bind-modules-perlUpgrade bindUpgrade bind-chrootenvUpgrade bind-modules-sqlite3Upgrade bind-modules-genericUpgrade bind-docUpgrade bind-utilsUpgrade libisccfg1600Upgrade libbind9-161Upgrade libns1604Upgrade libirs-develUpgrade libbind9-1600Upgrade bind-modules-mysqlUpgrade libdns1605Upgrade libisccfg163Upgrade libirs1601Upgrade libisc1606Upgrade libisccc1600 | Jul 31, 2024 | Jul 23, 2024 |
| Ubuntu | — | Upgrade bind9 (Ubuntu Pro)Upgrade bind9 | Jul 24, 2024 | Jul 23, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 23, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub