BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resources. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | May 25, 2026 | May 20, 2026 |
| Amazon Linux Ami 2 | — | Upgrade bind-export-develUpgrade bindUpgrade bind-libsUpgrade bind-licenseUpgrade bind-pkcs11-develUpgrade bind-pkcs11Upgrade bind-utilsUpgrade bind-develUpgrade bind-lite-develUpgrade bind-pkcs11-utilsUpgrade bind-debuginfoUpgrade bind-libs-liteUpgrade bind-sdbUpgrade bind-pkcs11-libsUpgrade bind-sdb-chrootUpgrade bind-export-libsUpgrade bind-chroot | Jun 9, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade bind-dnssec-utils-debuginfoUpgrade bind-debugsourceUpgrade bind-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-licenseUpgrade bind-docUpgrade bind-libs-debuginfoUpgrade bindUpgrade bind-develUpgrade bind-libsUpgrade bind-utilsUpgrade bind-chroot | May 28, 2026 | May 20, 2026 |
| Debian | — | Upgrade bind9 | May 24, 2026 | May 24, 2026 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory30 | Jun 29, 2026 | Jun 29, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 26, 2026 |
| Suse | — | Upgrade bind-modules-ldapUpgrade bind-modules-genericUpgrade bind-develUpgrade bindUpgrade libisc1107Upgrade bind-chrootenvUpgrade bind-modules-sqlite3Upgrade liblwres161Upgrade libirs-develUpgrade libdns1605Upgrade python-bindUpgrade libirs161Upgrade bind-modules-bdbhptUpgrade bind-utilsUpgrade bind-docUpgrade libisc1606Upgrade libisc1107-32bitUpgrade libisccfg163Upgrade bind-modules-perlUpgrade libdns1110Upgrade libirs1601Upgrade python3-bindUpgrade libisccc161Upgrade bind-modules-mysqlUpgrade libisccfg1600Upgrade libbind9-161 | Jun 9, 2026 | Jun 5, 2026 |
| Ubuntu | — | Upgrade bind9 (Ubuntu Pro)Upgrade bind9 | May 25, 2026 | May 21, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub