If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries). This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind9.16-dnssec-utilsUpgrade bind-docUpgrade bind9.16-utilsUpgrade python3-bind9.16Upgrade bind9.18-chrootUpgrade bind9.16-docUpgrade bind-sdbUpgrade bind9.16-develUpgrade bind-licenseUpgrade bind-libsUpgrade bind9.18-utilsUpgrade bind9.16-chrootUpgrade bindUpgrade bind-pkcs11-develUpgrade bind-dnssec-docUpgrade bind-dnssec-utilsUpgrade bind-lite-develUpgrade bind9.18-docUpgrade bind-sdb-chrootUpgrade bind9.18-develUpgrade bind9.18-libsUpgrade bind-pkcs11-utilsUpgrade bind-develUpgrade bind9.16Upgrade bind-libs-liteUpgrade bind-chrootUpgrade bind9.16-licenseUpgrade bind9.16-libsUpgrade bind9.18-dnssec-utilsUpgrade python3-bindUpgrade bind-pkcs11-libsUpgrade bind-pkcs11Upgrade bind-export-libsUpgrade bind-export-develUpgrade bind-utilsUpgrade bind9.18 | Apr 16, 2026 | Apr 13, 2026 |
| Alpine Linux | — | Upgrade bind | Mar 27, 2026 | Mar 25, 2026 |
| Amazon Linux Ami 2 | — | Upgrade bind-lite-develUpgrade bindUpgrade bind-export-libsUpgrade bind-export-develUpgrade bind-sdbUpgrade bind-debuginfoUpgrade bind-chrootUpgrade bind-pkcs11-develUpgrade bind-sdb-chrootUpgrade bind-pkcs11Upgrade bind-libs-liteUpgrade bind-licenseUpgrade bind-develUpgrade bind-libsUpgrade bind-utilsUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11-libs | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bind-docUpgrade bind-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-dnssec-utilsUpgrade bindUpgrade bind-utils-debuginfoUpgrade bind-debugsourceUpgrade bind-licenseUpgrade bind-utilsUpgrade bind-develUpgrade bind-libs-debuginfoUpgrade bind-chrootUpgrade bind-libs | Apr 7, 2026 | Mar 25, 2026 |
| Debian | — | Upgrade bind9 | Mar 30, 2026 | Mar 30, 2026 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jul 30, 2026 | Jul 29, 2026 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory30 | Jun 29, 2026 | Jun 29, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | May 29, 2026 |
| Oracle_linux | — | Upgrade python3-bindUpgrade bindUpgrade bind9.16Upgrade bind-pkcs11Upgrade bind-licenseUpgrade bind-sdbUpgrade bind9.18-chrootUpgrade bind-export-develUpgrade python3-bind9.16Upgrade bind-develUpgrade bind-sdb-chrootUpgrade bind-libsUpgrade bind9.16-chrootUpgrade bind9.16-dnssec-utilsUpgrade bind9.18-libsUpgrade bind9.16-licenseUpgrade bind9.18Upgrade bind-pkcs11-utilsUpgrade bind9.18-develUpgrade bind-export-libsUpgrade bind-dnssec-docUpgrade bind9.18-utilsUpgrade bind9.18-dnssec-utilsUpgrade bind9.16-docUpgrade bind-pkcs11-libsUpgrade bind-lite-develUpgrade bind-utilsUpgrade bind-libs-liteUpgrade bind9.16-libsUpgrade bind9.16-utilsUpgrade bind-docUpgrade bind9.16-develUpgrade bind-dnssec-utilsUpgrade bind-chrootUpgrade bind9.18-docUpgrade bind-pkcs11-devel | Apr 22, 2026 | Mar 25, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | Mar 25, 2026 |
| Redhat_linux | — | Upgrade python3-bind9.16Upgrade bind9.18-libsUpgrade bind9.16-utils-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind9.16-chrootUpgrade bind-libsUpgrade bind-pkcs11-develUpgrade bind-pkcs11-utils-debuginfoUpgrade bind9.18-develUpgrade bind-libs-debuginfoUpgrade bind9.16-licenseUpgrade bind-sdb-debuginfoUpgrade bind9.16-utilsUpgrade bind-utils-debuginfoUpgrade bind-export-develUpgrade bind-licenseUpgrade bind9.18-debugsourceUpgrade bind9.16-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-docUpgrade bind9.16-dnssec-utilsUpgrade bind9.18-libs-debuginfoUpgrade bind9.18-utilsUpgrade bind9.18Upgrade bind-debugsourceUpgrade bind-pkcs11-utilsUpgrade bind9.18-utils-debuginfoUpgrade bind-pkcs11-libsUpgrade python3-bindUpgrade bind9.16-libs-debuginfoUpgrade bind-sdbUpgrade bind-export-libs-debuginfoUpgrade bind9.18-dnssec-utilsUpgrade bind9.16Upgrade bind-chrootUpgrade bind-develUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-libs-liteUpgrade bind9.16-libsUpgrade bind-dnssec-docUpgrade bind-dnssec-utilsUpgrade bind-export-libsUpgrade bind-debuginfoUpgrade bind9.18-debuginfoUpgrade bind9.16-debugsourceUpgrade bind-libs-lite-debuginfoUpgrade bind9.18-docUpgrade bindUpgrade bind9.16-develUpgrade bind-pkcs11-debuginfoUpgrade bind-utilsUpgrade bind-pkcs11Upgrade bind-sdb-chrootUpgrade bind9.18-chrootUpgrade bind-lite-develUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind9.16-doc | Apr 15, 2026 | Mar 25, 2026 |
| Rocky_linux | — | Upgrade bind-sdb-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-sdb-chrootUpgrade bind9.16-libs-debuginfoUpgrade bind9.18-utilsUpgrade bind9.18-dnssec-utilsUpgrade bind-pkcs11-develUpgrade bind-pkcs11-libsUpgrade bind9.16-debuginfoUpgrade bind9.16-debugsourceUpgrade bind-libs-debuginfoUpgrade bind9.18-utils-debuginfoUpgrade bind9.16-utilsUpgrade bind9.16-utils-debuginfoUpgrade bind-libsUpgrade bind-dnssec-utils-debuginfoUpgrade bind9.16Upgrade bind-pkcs11-debuginfoUpgrade bind-export-libs-debuginfoUpgrade bind9.18-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-develUpgrade bind9.18-debugsourceUpgrade bind9.18-develUpgrade bind-lite-develUpgrade bind9.18-chrootUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-export-develUpgrade bind-export-libsUpgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade bind9.18-libsUpgrade bind9.18-libs-debuginfoUpgrade bind-sdbUpgrade bind9.16-libsUpgrade bind9.16-chrootUpgrade bind-pkcs11Upgrade bind-libs-lite-debuginfoUpgrade bind9.18Upgrade bind-debugsourceUpgrade bind-utils-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade bind-pkcs11-libs-debuginfoUpgrade bind9.16-develUpgrade bind-debuginfoUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind-utilsUpgrade bindUpgrade bind-chroot | Apr 16, 2026 | Apr 15, 2026 |
| Suse | — | Upgrade bind-docUpgrade libdns1110Upgrade bindUpgrade libisc1107Upgrade libisccc161Upgrade python-bindUpgrade bind-modules-bdbhptUpgrade libirs161Upgrade libirs-develUpgrade bind-modules-ldapUpgrade bind-modules-genericUpgrade libisc1107-32bitUpgrade libisccfg1600Upgrade bind-utilsUpgrade bind-modules-sqlite3Upgrade bind-modules-perlUpgrade libdns1605Upgrade liblwres161Upgrade libirs1601Upgrade python3-bindUpgrade bind-develUpgrade bind-chrootenvUpgrade libisccfg163Upgrade bind-modules-mysqlUpgrade libisc1606Upgrade libbind9-161 | Apr 10, 2026 | Apr 8, 2026 |
| Ubuntu | — | Upgrade bind9 | Mar 27, 2026 | Mar 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 1, 2026 | Mar 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub