If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by sending a stream of SIG(0) signed requests. This issue affects BIND 9 versions 9.0.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.49-S1, and 9.18.11-S1 through 9.18.27-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-bindalma-upgrade-bind-chrootalma-upgrade-bind-develalma-upgrade-bind-dnssec-docalma-upgrade-bind-dnssec-utilsalma-upgrade-bind-docalma-upgrade-bind-dyndb-ldapalma-upgrade-bind-export-develalma-upgrade-bind-export-libsalma-upgrade-bind-libsalma-upgrade-bind-libs-litealma-upgrade-bind-licensealma-upgrade-bind-lite-develalma-upgrade-bind-pkcs11alma-upgrade-bind-pkcs11-develalma-upgrade-bind-pkcs11-libsalma-upgrade-bind-pkcs11-utilsalma-upgrade-bind-sdbalma-upgrade-bind-sdb-chrootalma-upgrade-bind-utilsalma-upgrade-bind9.16alma-upgrade-bind9.16-chrootalma-upgrade-bind9.16-develalma-upgrade-bind9.16-dnssec-utilsalma-upgrade-bind9.16-docalma-upgrade-bind9.16-libsalma-upgrade-bind9.16-licensealma-upgrade-bind9.16-utilsalma-upgrade-python3-bindalma-upgrade-python3-bind9.16 | Aug 22, 2024 | Jul 23, 2024 | |
| Alpine Linux | alpine-linux-upgrade-bind | Aug 8, 2025 | Jul 23, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-bindamazon-linux-ami-2-upgrade-bind-chrootamazon-linux-ami-2-upgrade-bind-debuginfoamazon-linux-ami-2-upgrade-bind-develamazon-linux-ami-2-upgrade-bind-export-develamazon-linux-ami-2-upgrade-bind-export-libsamazon-linux-ami-2-upgrade-bind-libsamazon-linux-ami-2-upgrade-bind-libs-liteamazon-linux-ami-2-upgrade-bind-licenseamazon-linux-ami-2-upgrade-bind-lite-develamazon-linux-ami-2-upgrade-bind-pkcs11amazon-linux-ami-2-upgrade-bind-pkcs11-develamazon-linux-ami-2-upgrade-bind-pkcs11-libsamazon-linux-ami-2-upgrade-bind-pkcs11-utilsamazon-linux-ami-2-upgrade-bind-sdbamazon-linux-ami-2-upgrade-bind-sdb-chrootamazon-linux-ami-2-upgrade-bind-utils | Aug 14, 2024 | Jul 23, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-bindamazon-linux-2023-upgrade-bind-chrootamazon-linux-2023-upgrade-bind-debuginfoamazon-linux-2023-upgrade-bind-debugsourceamazon-linux-2023-upgrade-bind-develamazon-linux-2023-upgrade-bind-dlz-filesystemamazon-linux-2023-upgrade-bind-dlz-filesystem-debuginfoamazon-linux-2023-upgrade-bind-dlz-ldapamazon-linux-2023-upgrade-bind-dlz-ldap-debuginfoamazon-linux-2023-upgrade-bind-dlz-mysqlamazon-linux-2023-upgrade-bind-dlz-mysql-debuginfoamazon-linux-2023-upgrade-bind-dlz-sqlite3amazon-linux-2023-upgrade-bind-dlz-sqlite3-debuginfoamazon-linux-2023-upgrade-bind-dnssec-utilsamazon-linux-2023-upgrade-bind-dnssec-utils-debuginfoamazon-linux-2023-upgrade-bind-docamazon-linux-2023-upgrade-bind-libsamazon-linux-2023-upgrade-bind-libs-debuginfoamazon-linux-2023-upgrade-bind-licenseamazon-linux-2023-upgrade-bind-utilsamazon-linux-2023-upgrade-bind-utils-debuginfo | Feb 17, 2025 | Jul 23, 2024 | |
| Debian | debian-upgrade-bind9 | Jul 29, 2024 | Jul 23, 2024 | |
| Dell Powerstore Dsa2024462 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Nov 20, 2024 | |
| Dell Powerstore Dsa2024497 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Dec 19, 2024 | |
| Dell Powerstore Dsa2025050 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Jan 28, 2025 | |
| Dns Bind | upgrade-isc-bind-latest | Jul 24, 2024 | Jul 24, 2024 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Aug 23, 2024 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-bindhuawei-euleros-2_0_sp10-upgrade-bind-chroothuawei-euleros-2_0_sp10-upgrade-bind-dyndb-ldaphuawei-euleros-2_0_sp10-upgrade-bind-export-libshuawei-euleros-2_0_sp10-upgrade-bind-libshuawei-euleros-2_0_sp10-upgrade-bind-libs-litehuawei-euleros-2_0_sp10-upgrade-bind-pkcs11huawei-euleros-2_0_sp10-upgrade-bind-utils | Jan 14, 2025 | Jul 23, 2024 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-dhcp | Oct 9, 2024 | Jul 23, 2024 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-bindhuawei-euleros-2_0_sp12-upgrade-bind-chroothuawei-euleros-2_0_sp12-upgrade-bind-dnssec-dochuawei-euleros-2_0_sp12-upgrade-bind-dnssec-utilshuawei-euleros-2_0_sp12-upgrade-bind-libshuawei-euleros-2_0_sp12-upgrade-bind-licensehuawei-euleros-2_0_sp12-upgrade-bind-pkcs11huawei-euleros-2_0_sp12-upgrade-bind-pkcs11-libshuawei-euleros-2_0_sp12-upgrade-bind-pkcs11-utilshuawei-euleros-2_0_sp12-upgrade-bind-utilshuawei-euleros-2_0_sp12-upgrade-python3-bind | Oct 9, 2024 | Jul 23, 2024 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-dhcp | Jan 15, 2025 | Jul 23, 2024 | |
| Ibm Aix | ibm-aix-bind_advisory27 | Nov 19, 2024 | Jul 23, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-bindoracle-linux-upgrade-bind9-16oracle-linux-upgrade-bind9-16-chrootoracle-linux-upgrade-bind9-16-develoracle-linux-upgrade-bind9-16-dnssec-utilsoracle-linux-upgrade-bind9-16-docoracle-linux-upgrade-bind9-16-libsoracle-linux-upgrade-bind9-16-licenseoracle-linux-upgrade-bind9-16-utilsoracle-linux-upgrade-bind-chrootoracle-linux-upgrade-bind-develoracle-linux-upgrade-bind-dnssec-docoracle-linux-upgrade-bind-dnssec-utilsoracle-linux-upgrade-bind-docoracle-linux-upgrade-bind-dyndb-ldaporacle-linux-upgrade-bind-export-develoracle-linux-upgrade-bind-export-libsoracle-linux-upgrade-bind-libsoracle-linux-upgrade-bind-libs-liteoracle-linux-upgrade-bind-licenseoracle-linux-upgrade-bind-lite-develoracle-linux-upgrade-bind-pkcs11oracle-linux-upgrade-bind-pkcs11-develoracle-linux-upgrade-bind-pkcs11-libsoracle-linux-upgrade-bind-pkcs11-utilsoracle-linux-upgrade-bind-sdboracle-linux-upgrade-bind-sdb-chrootoracle-linux-upgrade-bind-utilsoracle-linux-upgrade-python3-bindoracle-linux-upgrade-python3-bind9-16 | Oct 16, 2024 | Jul 23, 2024 |
| Redhat Openshift | linuxrpm-upgrade-rhcos | Sep 5, 2024 | Jul 23, 2024 | |
| Redhat_linux | redhat-upgrade-bindredhat-upgrade-bind-chrootredhat-upgrade-bind-debuginforedhat-upgrade-bind-debugsourceredhat-upgrade-bind-develredhat-upgrade-bind-dnssec-docredhat-upgrade-bind-dnssec-utilsredhat-upgrade-bind-dnssec-utils-debuginforedhat-upgrade-bind-docredhat-upgrade-bind-dyndb-ldapredhat-upgrade-bind-dyndb-ldap-debuginforedhat-upgrade-bind-dyndb-ldap-debugsourceredhat-upgrade-bind-export-develredhat-upgrade-bind-export-libsredhat-upgrade-bind-export-libs-debuginforedhat-upgrade-bind-libsredhat-upgrade-bind-libs-debuginforedhat-upgrade-bind-libs-literedhat-upgrade-bind-libs-lite-debuginforedhat-upgrade-bind-licenseredhat-upgrade-bind-lite-develredhat-upgrade-bind-pkcs11redhat-upgrade-bind-pkcs11-debuginforedhat-upgrade-bind-pkcs11-develredhat-upgrade-bind-pkcs11-libsredhat-upgrade-bind-pkcs11-libs-debuginforedhat-upgrade-bind-pkcs11-utilsredhat-upgrade-bind-pkcs11-utils-debuginforedhat-upgrade-bind-sdbredhat-upgrade-bind-sdb-chrootredhat-upgrade-bind-sdb-debuginforedhat-upgrade-bind-utilsredhat-upgrade-bind-utils-debuginforedhat-upgrade-bind9-16redhat-upgrade-bind9-16-chrootredhat-upgrade-bind9-16-debuginforedhat-upgrade-bind9-16-debugsourceredhat-upgrade-bind9-16-develredhat-upgrade-bind9-16-dnssec-utilsredhat-upgrade-bind9-16-dnssec-utils-debuginforedhat-upgrade-bind9-16-docredhat-upgrade-bind9-16-libsredhat-upgrade-bind9-16-libs-debuginforedhat-upgrade-bind9-16-licenseredhat-upgrade-bind9-16-utilsredhat-upgrade-bind9-16-utils-debuginforedhat-upgrade-python3-bindredhat-upgrade-python3-bind9-16 | Aug 22, 2024 | Jul 23, 2024 | |
| Rocky_linux | rocky-upgrade-bindrocky-upgrade-bind-chrootrocky-upgrade-bind-debuginforocky-upgrade-bind-debugsourcerocky-upgrade-bind-develrocky-upgrade-bind-dnssec-utilsrocky-upgrade-bind-dnssec-utils-debuginforocky-upgrade-bind-dyndb-ldaprocky-upgrade-bind-dyndb-ldap-debuginforocky-upgrade-bind-dyndb-ldap-debugsourcerocky-upgrade-bind-export-develrocky-upgrade-bind-export-libsrocky-upgrade-bind-export-libs-debuginforocky-upgrade-bind-libsrocky-upgrade-bind-libs-debuginforocky-upgrade-bind-libs-literocky-upgrade-bind-libs-lite-debuginforocky-upgrade-bind-lite-develrocky-upgrade-bind-pkcs11rocky-upgrade-bind-pkcs11-debuginforocky-upgrade-bind-pkcs11-develrocky-upgrade-bind-pkcs11-libsrocky-upgrade-bind-pkcs11-libs-debuginforocky-upgrade-bind-pkcs11-utilsrocky-upgrade-bind-pkcs11-utils-debuginforocky-upgrade-bind-sdbrocky-upgrade-bind-sdb-chrootrocky-upgrade-bind-sdb-debuginforocky-upgrade-bind-utilsrocky-upgrade-bind-utils-debuginforocky-upgrade-bind9.16rocky-upgrade-bind9.16-chrootrocky-upgrade-bind9.16-debuginforocky-upgrade-bind9.16-debugsourcerocky-upgrade-bind9.16-develrocky-upgrade-bind9.16-dnssec-utilsrocky-upgrade-bind9.16-dnssec-utils-debuginforocky-upgrade-bind9.16-libsrocky-upgrade-bind9.16-libs-debuginforocky-upgrade-bind9.16-utilsrocky-upgrade-bind9.16-utils-debuginfo | Aug 22, 2024 | Jul 23, 2024 | |
| Suse | — | suse-upgrade-bindsuse-upgrade-bind-chrootenvsuse-upgrade-bind-develsuse-upgrade-bind-docsuse-upgrade-bind-modules-genericsuse-upgrade-bind-modules-ldapsuse-upgrade-bind-modules-mysqlsuse-upgrade-bind-modules-perlsuse-upgrade-bind-modules-sqlite3suse-upgrade-bind-utilssuse-upgrade-libbind9-1600suse-upgrade-libbind9-161suse-upgrade-libdns1110suse-upgrade-libdns1605suse-upgrade-libirs-develsuse-upgrade-libirs1601suse-upgrade-libirs161suse-upgrade-libisc1107suse-upgrade-libisc1107-32bitsuse-upgrade-libisc1606suse-upgrade-libisccc1600suse-upgrade-libisccc161suse-upgrade-libisccfg1600suse-upgrade-libisccfg163suse-upgrade-liblwres161suse-upgrade-libns1604suse-upgrade-python-bindsuse-upgrade-python3-bind | Jul 31, 2024 | Jul 23, 2024 |
| Ubuntu | ubuntu-pro-upgrade-bind9ubuntu-upgrade-bind9 | Jul 24, 2024 | Jul 23, 2024 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jul 23, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub