The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory, causing `named` to terminate unexpectedly. Since each incoming control channel message is fully parsed before its contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key; only network access to the control channel's configured TCP port is necessary. This issue affects BIND 9 versions 9.2.0 through 9.16.43, 9.18.0 through 9.18.18, 9.19.0 through 9.19.16, 9.9.3-S1 through 9.16.43-S1, and 9.18.0-S1 through 9.18.18-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-sdb-chrootUpgrade bind9.16-develUpgrade bind-pkcs11-develUpgrade bind9.16-licenseUpgrade bind9.16-utilsUpgrade bind-utilsUpgrade bind-develUpgrade bind-pkcs11-libsUpgrade bind9.16Upgrade python3-bindUpgrade bind-libsUpgrade bind-licenseUpgrade bind9.16-dnssec-utilsUpgrade bind9.16-docUpgrade bind-lite-develUpgrade bind9.16-chrootUpgrade bind9.16-libsUpgrade bind-export-develUpgrade python3-bind9.16Upgrade bindUpgrade bind-docUpgrade bind-pkcs11-utilsUpgrade bind-dnssec-utilsUpgrade bind-sdbUpgrade bind-export-libsUpgrade bind-libs-liteUpgrade bind-pkcs11Upgrade bind-dnssec-docUpgrade bind-chroot | Oct 10, 2023 | Sep 20, 2023 |
| Alpine Linux | — | Upgrade bind | Mar 26, 2024 | Sep 20, 2023 |
| Amazon Linux Ami 2 | — | Upgrade bind-chrootUpgrade bind-libs-liteUpgrade bind-libsUpgrade bind-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-utilsUpgrade bind-sdbUpgrade bind-lite-develUpgrade bind-pkcs11-utilsUpgrade bind-sdb-chrootUpgrade bind-export-libsUpgrade bind-pkcs11-develUpgrade bind-develUpgrade bind-export-develUpgrade bindUpgrade bind-pkcs11Upgrade bind-license | Oct 6, 2023 | Sep 20, 2023 |
| Amazon_linux | — | Upgrade bind | Oct 7, 2023 | Sep 20, 2023 |
| Amazon_linux_2023 | — | Upgrade bind-pkcs11Upgrade bind-debuginfoUpgrade bind-dlz-sqlite3Upgrade bind-pkcs11-libs-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-dlz-sqlite3-debuginfoUpgrade bind-licenseUpgrade python3-bindUpgrade bind-libsUpgrade bind-develUpgrade bind-dnssec-utils-debuginfoUpgrade bind-libs-debuginfoUpgrade bindUpgrade bind-pkcs11-develUpgrade bind-utilsUpgrade bind-pkcs11-libsUpgrade bind-dnssec-docUpgrade bind-docUpgrade bind-debugsourceUpgrade bind-utils-debuginfoUpgrade bind-dlz-mysqlUpgrade bind-dlz-filesystem-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-chrootUpgrade bind-pkcs11-debuginfoUpgrade bind-dlz-ldap-debuginfoUpgrade bind-dlz-filesystemUpgrade bind-pkcs11-utilsUpgrade bind-dlz-mysql-debuginfoUpgrade bind-dlz-ldap | Feb 17, 2025 | Sep 20, 2023 |
| Centos_linux | — | Upgrade bind-sdb-chrootUpgrade bind-pkcs11-develUpgrade bind-export-libsUpgrade bind-libsUpgrade bind-licenseUpgrade bindUpgrade bind-export-develUpgrade bind-pkcs11Upgrade bind-sdbUpgrade bind-utilsUpgrade bind-chrootUpgrade bind-pkcs11-utilsUpgrade bind-develUpgrade bind-debuginfoUpgrade bind-lite-develUpgrade bind-libs-liteUpgrade bind-pkcs11-libs | Oct 6, 2023 | Sep 20, 2023 |
| Debian | — | Upgrade bind9 | Sep 25, 2023 | Sep 20, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Jan 29, 2024 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade dhcp | Jan 10, 2024 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bind-licenseUpgrade bind-pkcs11-utilsUpgrade bind-dnssec-docUpgrade bind-pkcs11Upgrade bind-libsUpgrade bindUpgrade bind-chrootUpgrade bind-dnssec-utilsUpgrade python3-bindUpgrade bind-pkcs11-libsUpgrade bind-utils | Jan 10, 2024 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade dhcp | Mar 19, 2025 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp13 | — | Upgrade dhcp | Apr 1, 2025 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade bind-libs-liteUpgrade bind-chrootUpgrade bind-pkcs11-libsUpgrade bind-utilsUpgrade bindUpgrade bind-libsUpgrade bind-pkcs11-utilsUpgrade bind-licenseUpgrade bind-pkcs11 | Feb 12, 2024 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bind-libs-liteUpgrade bind-pkcs11-libsUpgrade python3-bindUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11Upgrade bindUpgrade bind-export-libsUpgrade bind-export-develUpgrade bind-licenseUpgrade bind-libs | Mar 13, 2024 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade bind-libsUpgrade bind-pkcs11Upgrade bind-chrootUpgrade bindUpgrade bind-export-libsUpgrade python3-bindUpgrade bind-utilsUpgrade bind-libs-lite | Jan 10, 2024 | Sep 20, 2023 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory25 | Dec 19, 2023 | Sep 20, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Feb 20, 2024 |
| Oracle_linux | — | Upgrade bind9.16Upgrade bind-export-libsUpgrade bind-pkcs11-utilsUpgrade bind9.16-libsUpgrade bind-pkcs11-libsUpgrade bind-export-develUpgrade bind9.16-licenseUpgrade bind-licenseUpgrade bind-dnssec-utilsUpgrade bind-sdb-chrootUpgrade python3-bindUpgrade bind-libs-liteUpgrade bind-libsUpgrade bind9.16-chrootUpgrade bind-develUpgrade bind-pkcs11-develUpgrade bind-pkcs11Upgrade bind9.16-develUpgrade bind-lite-develUpgrade python3-bind9.16Upgrade bind-sdbUpgrade bind-chrootUpgrade bind-docUpgrade bind-dnssec-docUpgrade bind9.16-docUpgrade bind-utilsUpgrade bind9.16-dnssec-utilsUpgrade bind9.16-utilsUpgrade bind | Oct 7, 2023 | Sep 20, 2023 |
| Redhat_linux | — | Upgrade bind-pkcs11-utilsUpgrade bind-pkcs11-develUpgrade bind-export-libs-debuginfoUpgrade bind9.16Upgrade bind9.16-debuginfoUpgrade bind-pkcs11Upgrade bind-utilsUpgrade bind-develUpgrade bind9.16-debugsourceUpgrade bind9.16-licenseUpgrade bind-libs-liteUpgrade python3-bindUpgrade bind-sdb-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind9.16-chrootUpgrade bind-pkcs11-libsUpgrade bind-libs-debuginfoUpgrade bind-sdb-chrootUpgrade bind-licenseUpgrade bind-pkcs11-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade bind-libsUpgrade bind9.16-libs-debuginfoUpgrade bind9.16-develUpgrade bind-dnssec-utilsUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-lite-develUpgrade bind9.16-utilsUpgrade bind-chrootUpgrade bind-debuginfoUpgrade python3-bind9.16Upgrade bind-export-libsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind9.16-libsUpgrade bind-sdbUpgrade bind-dnssec-utils-debuginfoUpgrade bind-docUpgrade bind-utils-debuginfoUpgrade bind-export-develUpgrade bind-libs-lite-debuginfoUpgrade bind-dnssec-docUpgrade bind-debugsourceUpgrade bind9.16-dnssec-utilsUpgrade bind9.16-docUpgrade bind | Oct 6, 2023 | Sep 20, 2023 |
| Rocky_linux | — | — | Aug 15, 2024 | Sep 20, 2023 |
| Suse | — | Upgrade python3-bindUpgrade libbind9-1600Upgrade libisc1606Upgrade libdns1605Upgrade libdns1605-32bitUpgrade bind-chrootenvUpgrade libisc1107Upgrade libisccc1600-32bitUpgrade bind-develUpgrade liblwres161Upgrade libisccfg1600-32bitUpgrade libbind9-1600-32bitUpgrade libirs-develUpgrade bindUpgrade libns1604-32bitUpgrade libirs1601Upgrade bind-docUpgrade libisc1606-32bitUpgrade libisccfg163Upgrade python-bindUpgrade libns1604Upgrade libisc1107-32bitUpgrade libdns1110Upgrade libirs161Upgrade libisccfg1600Upgrade bind-devel-32bitUpgrade libisccc161Upgrade bind-utilsUpgrade libbind9-161Upgrade libirs1601-32bitUpgrade libisccc1600 | Sep 25, 2023 | Sep 20, 2023 |
| Ubuntu | — | Upgrade bind9Upgrade libbind9-160 (Ubuntu Pro)Upgrade libbind9-90 (Ubuntu Pro)Upgrade bind9 (Ubuntu Pro)Upgrade libbind9-140 (Ubuntu Pro) | Sep 21, 2023 | Sep 20, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 20, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub