The DNS message parsing code in `named` includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected `named` instance by exploiting this flaw. This issue affects both authoritative servers and recursive resolvers. This issue affects BIND 9 versions 9.0.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-bindalma-upgrade-bind-chrootalma-upgrade-bind-develalma-upgrade-bind-dnssec-docalma-upgrade-bind-dnssec-utilsalma-upgrade-bind-docalma-upgrade-bind-dyndb-ldapalma-upgrade-bind-export-develalma-upgrade-bind-export-libsalma-upgrade-bind-libsalma-upgrade-bind-libs-litealma-upgrade-bind-licensealma-upgrade-bind-lite-develalma-upgrade-bind-pkcs11alma-upgrade-bind-pkcs11-develalma-upgrade-bind-pkcs11-libsalma-upgrade-bind-pkcs11-utilsalma-upgrade-bind-sdbalma-upgrade-bind-sdb-chrootalma-upgrade-bind-utilsalma-upgrade-bind9.16alma-upgrade-bind9.16-chrootalma-upgrade-bind9.16-develalma-upgrade-bind9.16-dnssec-utilsalma-upgrade-bind9.16-docalma-upgrade-bind9.16-libsalma-upgrade-bind9.16-licensealma-upgrade-bind9.16-utilsalma-upgrade-python3-bindalma-upgrade-python3-bind9.16 | Apr 15, 2024 | Feb 13, 2024 | |
| Alpine Linux | alpine-linux-upgrade-bind | Mar 26, 2024 | Feb 13, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-bindamazon-linux-ami-2-upgrade-bind-chrootamazon-linux-ami-2-upgrade-bind-debuginfoamazon-linux-ami-2-upgrade-bind-develamazon-linux-ami-2-upgrade-bind-export-develamazon-linux-ami-2-upgrade-bind-export-libsamazon-linux-ami-2-upgrade-bind-libsamazon-linux-ami-2-upgrade-bind-libs-liteamazon-linux-ami-2-upgrade-bind-licenseamazon-linux-ami-2-upgrade-bind-lite-develamazon-linux-ami-2-upgrade-bind-pkcs11amazon-linux-ami-2-upgrade-bind-pkcs11-develamazon-linux-ami-2-upgrade-bind-pkcs11-libsamazon-linux-ami-2-upgrade-bind-pkcs11-utilsamazon-linux-ami-2-upgrade-bind-sdbamazon-linux-ami-2-upgrade-bind-sdb-chrootamazon-linux-ami-2-upgrade-bind-utils | Aug 21, 2024 | Feb 13, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-bindamazon-linux-2023-upgrade-bind-chrootamazon-linux-2023-upgrade-bind-debuginfoamazon-linux-2023-upgrade-bind-debugsourceamazon-linux-2023-upgrade-bind-develamazon-linux-2023-upgrade-bind-dlz-filesystemamazon-linux-2023-upgrade-bind-dlz-filesystem-debuginfoamazon-linux-2023-upgrade-bind-dlz-ldapamazon-linux-2023-upgrade-bind-dlz-ldap-debuginfoamazon-linux-2023-upgrade-bind-dlz-mysqlamazon-linux-2023-upgrade-bind-dlz-mysql-debuginfoamazon-linux-2023-upgrade-bind-dlz-sqlite3amazon-linux-2023-upgrade-bind-dlz-sqlite3-debuginfoamazon-linux-2023-upgrade-bind-dnssec-docamazon-linux-2023-upgrade-bind-dnssec-utilsamazon-linux-2023-upgrade-bind-dnssec-utils-debuginfoamazon-linux-2023-upgrade-bind-docamazon-linux-2023-upgrade-bind-libsamazon-linux-2023-upgrade-bind-libs-debuginfoamazon-linux-2023-upgrade-bind-licenseamazon-linux-2023-upgrade-bind-pkcs11amazon-linux-2023-upgrade-bind-pkcs11-debuginfoamazon-linux-2023-upgrade-bind-pkcs11-develamazon-linux-2023-upgrade-bind-pkcs11-libsamazon-linux-2023-upgrade-bind-pkcs11-libs-debuginfoamazon-linux-2023-upgrade-bind-pkcs11-utilsamazon-linux-2023-upgrade-bind-pkcs11-utils-debuginfoamazon-linux-2023-upgrade-bind-utilsamazon-linux-2023-upgrade-bind-utils-debuginfoamazon-linux-2023-upgrade-python3-bind | Feb 17, 2025 | Feb 13, 2024 | |
| Centos_linux | — | centos-upgrade-bindcentos-upgrade-bind-chrootcentos-upgrade-bind-debuginfocentos-upgrade-bind-develcentos-upgrade-bind-dyndb-ldapcentos-upgrade-bind-dyndb-ldap-debuginfocentos-upgrade-bind-export-develcentos-upgrade-bind-export-libscentos-upgrade-bind-libscentos-upgrade-bind-libs-litecentos-upgrade-bind-licensecentos-upgrade-bind-lite-develcentos-upgrade-bind-pkcs11centos-upgrade-bind-pkcs11-develcentos-upgrade-bind-pkcs11-libscentos-upgrade-bind-pkcs11-utilscentos-upgrade-bind-sdbcentos-upgrade-bind-sdb-chrootcentos-upgrade-bind-utilscentos-upgrade-dhclientcentos-upgrade-dhcpcentos-upgrade-dhcp-commoncentos-upgrade-dhcp-debuginfocentos-upgrade-dhcp-develcentos-upgrade-dhcp-libs | Jun 11, 2024 | Feb 13, 2024 |
| Debian | debian-upgrade-bind9 | Feb 23, 2024 | Feb 13, 2024 | |
| Dell Powerstore Dsa2024462 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Nov 20, 2024 | |
| Dell Powerstore Dsa2024497 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Dec 19, 2024 | |
| Dell Powerstore Dsa2025050 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Jan 28, 2025 | |
| Dns Bind | upgrade-isc-bind-latest | Feb 15, 2024 | Feb 15, 2024 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Mar 23, 2024 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-bindhuawei-euleros-2_0_sp11-upgrade-bind-chroothuawei-euleros-2_0_sp11-upgrade-bind-dnssec-dochuawei-euleros-2_0_sp11-upgrade-bind-dnssec-utilshuawei-euleros-2_0_sp11-upgrade-bind-libshuawei-euleros-2_0_sp11-upgrade-bind-licensehuawei-euleros-2_0_sp11-upgrade-bind-pkcs11huawei-euleros-2_0_sp11-upgrade-bind-pkcs11-libshuawei-euleros-2_0_sp11-upgrade-bind-pkcs11-utilshuawei-euleros-2_0_sp11-upgrade-bind-utilshuawei-euleros-2_0_sp11-upgrade-python3-bind | Jun 3, 2024 | Feb 13, 2024 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-bindhuawei-euleros-2_0_sp12-upgrade-bind-chroothuawei-euleros-2_0_sp12-upgrade-bind-dnssec-dochuawei-euleros-2_0_sp12-upgrade-bind-dnssec-utilshuawei-euleros-2_0_sp12-upgrade-bind-libshuawei-euleros-2_0_sp12-upgrade-bind-licensehuawei-euleros-2_0_sp12-upgrade-bind-pkcs11huawei-euleros-2_0_sp12-upgrade-bind-pkcs11-libshuawei-euleros-2_0_sp12-upgrade-bind-pkcs11-utilshuawei-euleros-2_0_sp12-upgrade-bind-utilshuawei-euleros-2_0_sp12-upgrade-python3-bind | Jul 1, 2024 | Feb 13, 2024 | |
| Ibm Aix | ibm-aix-bind_advisory26 | Jun 5, 2024 | Feb 13, 2024 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Oct 8, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-bindoracle-linux-upgrade-bind9-16oracle-linux-upgrade-bind9-16-chrootoracle-linux-upgrade-bind9-16-develoracle-linux-upgrade-bind9-16-dnssec-utilsoracle-linux-upgrade-bind9-16-docoracle-linux-upgrade-bind9-16-libsoracle-linux-upgrade-bind9-16-licenseoracle-linux-upgrade-bind9-16-utilsoracle-linux-upgrade-bind-chrootoracle-linux-upgrade-bind-develoracle-linux-upgrade-bind-dnssec-docoracle-linux-upgrade-bind-dnssec-utilsoracle-linux-upgrade-bind-docoracle-linux-upgrade-bind-dyndb-ldaporacle-linux-upgrade-bind-export-develoracle-linux-upgrade-bind-export-libsoracle-linux-upgrade-bind-libsoracle-linux-upgrade-bind-libs-liteoracle-linux-upgrade-bind-licenseoracle-linux-upgrade-bind-lite-develoracle-linux-upgrade-bind-pkcs11oracle-linux-upgrade-bind-pkcs11-develoracle-linux-upgrade-bind-pkcs11-libsoracle-linux-upgrade-bind-pkcs11-utilsoracle-linux-upgrade-bind-sdboracle-linux-upgrade-bind-sdb-chrootoracle-linux-upgrade-bind-utilsoracle-linux-upgrade-dhclientoracle-linux-upgrade-dhcporacle-linux-upgrade-dhcp-clientoracle-linux-upgrade-dhcp-commonoracle-linux-upgrade-dhcp-develoracle-linux-upgrade-dhcp-libsoracle-linux-upgrade-dhcp-relayoracle-linux-upgrade-dhcp-serveroracle-linux-upgrade-python3-bindoracle-linux-upgrade-python3-bind9-16 | Apr 12, 2024 | Feb 13, 2024 |
| Redhat_linux | redhat-upgrade-bindredhat-upgrade-bind-chrootredhat-upgrade-bind-debuginforedhat-upgrade-bind-debugsourceredhat-upgrade-bind-develredhat-upgrade-bind-dnssec-docredhat-upgrade-bind-dnssec-utilsredhat-upgrade-bind-dnssec-utils-debuginforedhat-upgrade-bind-docredhat-upgrade-bind-dyndb-ldapredhat-upgrade-bind-dyndb-ldap-debuginforedhat-upgrade-bind-dyndb-ldap-debugsourceredhat-upgrade-bind-export-develredhat-upgrade-bind-export-libsredhat-upgrade-bind-export-libs-debuginforedhat-upgrade-bind-libsredhat-upgrade-bind-libs-debuginforedhat-upgrade-bind-libs-literedhat-upgrade-bind-libs-lite-debuginforedhat-upgrade-bind-licenseredhat-upgrade-bind-lite-develredhat-upgrade-bind-pkcs11redhat-upgrade-bind-pkcs11-debuginforedhat-upgrade-bind-pkcs11-develredhat-upgrade-bind-pkcs11-libsredhat-upgrade-bind-pkcs11-libs-debuginforedhat-upgrade-bind-pkcs11-utilsredhat-upgrade-bind-pkcs11-utils-debuginforedhat-upgrade-bind-sdbredhat-upgrade-bind-sdb-chrootredhat-upgrade-bind-sdb-debuginforedhat-upgrade-bind-utilsredhat-upgrade-bind-utils-debuginforedhat-upgrade-bind9-16redhat-upgrade-bind9-16-chrootredhat-upgrade-bind9-16-debuginforedhat-upgrade-bind9-16-debugsourceredhat-upgrade-bind9-16-develredhat-upgrade-bind9-16-dnssec-utilsredhat-upgrade-bind9-16-dnssec-utils-debuginforedhat-upgrade-bind9-16-docredhat-upgrade-bind9-16-libsredhat-upgrade-bind9-16-libs-debuginforedhat-upgrade-bind9-16-licenseredhat-upgrade-bind9-16-utilsredhat-upgrade-bind9-16-utils-debuginforedhat-upgrade-dhclientredhat-upgrade-dhcpredhat-upgrade-dhcp-clientredhat-upgrade-dhcp-client-debuginforedhat-upgrade-dhcp-commonredhat-upgrade-dhcp-debuginforedhat-upgrade-dhcp-debugsourceredhat-upgrade-dhcp-develredhat-upgrade-dhcp-libsredhat-upgrade-dhcp-libs-debuginforedhat-upgrade-dhcp-relayredhat-upgrade-dhcp-relay-debuginforedhat-upgrade-dhcp-serverredhat-upgrade-dhcp-server-debuginforedhat-upgrade-python3-bindredhat-upgrade-python3-bind9-16 | Apr 3, 2024 | Feb 13, 2024 | |
| Rocky_linux | rocky-upgrade-bindrocky-upgrade-bind-chrootrocky-upgrade-bind-debuginforocky-upgrade-bind-debugsourcerocky-upgrade-bind-develrocky-upgrade-bind-dnssec-utilsrocky-upgrade-bind-dnssec-utils-debuginforocky-upgrade-bind-dyndb-ldaprocky-upgrade-bind-dyndb-ldap-debuginforocky-upgrade-bind-dyndb-ldap-debugsourcerocky-upgrade-bind-export-develrocky-upgrade-bind-export-libsrocky-upgrade-bind-export-libs-debuginforocky-upgrade-bind-libsrocky-upgrade-bind-libs-debuginforocky-upgrade-bind-libs-literocky-upgrade-bind-libs-lite-debuginforocky-upgrade-bind-lite-develrocky-upgrade-bind-pkcs11rocky-upgrade-bind-pkcs11-debuginforocky-upgrade-bind-pkcs11-develrocky-upgrade-bind-pkcs11-libsrocky-upgrade-bind-pkcs11-libs-debuginforocky-upgrade-bind-pkcs11-utilsrocky-upgrade-bind-pkcs11-utils-debuginforocky-upgrade-bind-sdbrocky-upgrade-bind-sdb-chrootrocky-upgrade-bind-sdb-debuginforocky-upgrade-bind-utilsrocky-upgrade-bind-utils-debuginforocky-upgrade-bind9.16rocky-upgrade-bind9.16-chrootrocky-upgrade-bind9.16-debuginforocky-upgrade-bind9.16-debugsourcerocky-upgrade-bind9.16-develrocky-upgrade-bind9.16-dnssec-utilsrocky-upgrade-bind9.16-dnssec-utils-debuginforocky-upgrade-bind9.16-libsrocky-upgrade-bind9.16-libs-debuginforocky-upgrade-bind9.16-utilsrocky-upgrade-bind9.16-utils-debuginforocky-upgrade-dhcp-clientrocky-upgrade-dhcp-client-debuginforocky-upgrade-dhcp-debuginforocky-upgrade-dhcp-debugsourcerocky-upgrade-dhcp-libsrocky-upgrade-dhcp-libs-debuginforocky-upgrade-dhcp-relayrocky-upgrade-dhcp-relay-debuginforocky-upgrade-dhcp-serverrocky-upgrade-dhcp-server-debuginfo | May 8, 2024 | Feb 13, 2024 | |
| Suse | — | suse-upgrade-bindsuse-upgrade-bind-chrootenvsuse-upgrade-bind-develsuse-upgrade-bind-docsuse-upgrade-bind-utilssuse-upgrade-libbind9-1600suse-upgrade-libbind9-161suse-upgrade-libdns1110suse-upgrade-libdns1605suse-upgrade-libirs-develsuse-upgrade-libirs1601suse-upgrade-libirs161suse-upgrade-libisc1107suse-upgrade-libisc1107-32bitsuse-upgrade-libisc1606suse-upgrade-libisccc1600suse-upgrade-libisccc161suse-upgrade-libisccfg1600suse-upgrade-libisccfg163suse-upgrade-liblwres161suse-upgrade-libns1604suse-upgrade-libuv-develsuse-upgrade-libuv1suse-upgrade-python-bindsuse-upgrade-python3-bind | Feb 22, 2024 | Feb 13, 2024 |
| Ubuntu | ubuntu-upgrade-bind9 | Feb 14, 2024 | Feb 13, 2024 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Feb 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub