It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-bindalma-upgrade-bind-chrootalma-upgrade-bind-develalma-upgrade-bind-dnssec-docalma-upgrade-bind-dnssec-utilsalma-upgrade-bind-docalma-upgrade-bind-export-develalma-upgrade-bind-export-libsalma-upgrade-bind-libsalma-upgrade-bind-libs-litealma-upgrade-bind-licensealma-upgrade-bind-lite-develalma-upgrade-bind-pkcs11alma-upgrade-bind-pkcs11-develalma-upgrade-bind-pkcs11-libsalma-upgrade-bind-pkcs11-utilsalma-upgrade-bind-sdbalma-upgrade-bind-sdb-chrootalma-upgrade-bind-utilsalma-upgrade-bind9.16alma-upgrade-bind9.16-chrootalma-upgrade-bind9.16-develalma-upgrade-bind9.16-dnssec-utilsalma-upgrade-bind9.16-docalma-upgrade-bind9.16-libsalma-upgrade-bind9.16-licensealma-upgrade-bind9.16-utilsalma-upgrade-bind9.18alma-upgrade-bind9.18-chrootalma-upgrade-bind9.18-develalma-upgrade-bind9.18-dnssec-utilsalma-upgrade-bind9.18-docalma-upgrade-bind9.18-libsalma-upgrade-bind9.18-utilsalma-upgrade-python3-bindalma-upgrade-python3-bind9.16 | Feb 21, 2025 | Jan 29, 2025 | |
| Alpine Linux | alpine-linux-upgrade-bind | Aug 8, 2025 | Jan 29, 2025 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-bindamazon-linux-ami-2-upgrade-bind-chrootamazon-linux-ami-2-upgrade-bind-debuginfoamazon-linux-ami-2-upgrade-bind-develamazon-linux-ami-2-upgrade-bind-export-develamazon-linux-ami-2-upgrade-bind-export-libsamazon-linux-ami-2-upgrade-bind-libsamazon-linux-ami-2-upgrade-bind-libs-liteamazon-linux-ami-2-upgrade-bind-licenseamazon-linux-ami-2-upgrade-bind-lite-develamazon-linux-ami-2-upgrade-bind-pkcs11amazon-linux-ami-2-upgrade-bind-pkcs11-develamazon-linux-ami-2-upgrade-bind-pkcs11-libsamazon-linux-ami-2-upgrade-bind-pkcs11-utilsamazon-linux-ami-2-upgrade-bind-sdbamazon-linux-ami-2-upgrade-bind-sdb-chrootamazon-linux-ami-2-upgrade-bind-utils | Feb 5, 2025 | Jan 29, 2025 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-bindamazon-linux-2023-upgrade-bind-chrootamazon-linux-2023-upgrade-bind-debuginfoamazon-linux-2023-upgrade-bind-debugsourceamazon-linux-2023-upgrade-bind-develamazon-linux-2023-upgrade-bind-dnssec-utilsamazon-linux-2023-upgrade-bind-dnssec-utils-debuginfoamazon-linux-2023-upgrade-bind-docamazon-linux-2023-upgrade-bind-libsamazon-linux-2023-upgrade-bind-libs-debuginfoamazon-linux-2023-upgrade-bind-licenseamazon-linux-2023-upgrade-bind-utilsamazon-linux-2023-upgrade-bind-utils-debuginfo | Feb 17, 2025 | Jan 29, 2025 | |
| Debian | debian-upgrade-bind9 | Jan 31, 2025 | Jan 31, 2025 | |
| Dell Powerstore Dsa2025223 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | May 27, 2025 | |
| Dell Powerstore Dsa2025342 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Sep 2, 2025 | |
| Dell Powerstore Dsa2026039 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Jan 6, 2026 | |
| Dns Bind | upgrade-isc-bind-latest | Feb 11, 2025 | Jan 29, 2025 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Apr 15, 2025 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-bindhuawei-euleros-2_0_sp10-upgrade-bind-chroothuawei-euleros-2_0_sp10-upgrade-bind-export-libshuawei-euleros-2_0_sp10-upgrade-bind-libshuawei-euleros-2_0_sp10-upgrade-bind-libs-litehuawei-euleros-2_0_sp10-upgrade-bind-pkcs11huawei-euleros-2_0_sp10-upgrade-bind-utilshuawei-euleros-2_0_sp10-upgrade-python3-bind | Nov 12, 2025 | Jul 24, 2025 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-bindhuawei-euleros-2_0_sp11-upgrade-bind-chroothuawei-euleros-2_0_sp11-upgrade-bind-dnssec-dochuawei-euleros-2_0_sp11-upgrade-bind-dnssec-utilshuawei-euleros-2_0_sp11-upgrade-bind-libshuawei-euleros-2_0_sp11-upgrade-bind-licensehuawei-euleros-2_0_sp11-upgrade-bind-pkcs11huawei-euleros-2_0_sp11-upgrade-bind-pkcs11-libshuawei-euleros-2_0_sp11-upgrade-bind-pkcs11-utilshuawei-euleros-2_0_sp11-upgrade-bind-utilshuawei-euleros-2_0_sp11-upgrade-python3-bind | Apr 11, 2025 | Jan 29, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-dhcp | May 7, 2025 | Jan 29, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-dhcp | Apr 1, 2025 | Jan 29, 2025 | |
| Ibm Aix | ibm-aix-bind_advisory28 | May 21, 2025 | Jan 29, 2025 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Jul 9, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-bindoracle-linux-upgrade-bind9-16oracle-linux-upgrade-bind9-16-chrootoracle-linux-upgrade-bind9-16-develoracle-linux-upgrade-bind9-16-dnssec-utilsoracle-linux-upgrade-bind9-16-docoracle-linux-upgrade-bind9-16-libsoracle-linux-upgrade-bind9-16-licenseoracle-linux-upgrade-bind9-16-utilsoracle-linux-upgrade-bind9-18oracle-linux-upgrade-bind9-18-chrootoracle-linux-upgrade-bind9-18-develoracle-linux-upgrade-bind9-18-dnssec-utilsoracle-linux-upgrade-bind9-18-docoracle-linux-upgrade-bind9-18-libsoracle-linux-upgrade-bind9-18-utilsoracle-linux-upgrade-bind-chrootoracle-linux-upgrade-bind-develoracle-linux-upgrade-bind-dnssec-docoracle-linux-upgrade-bind-dnssec-utilsoracle-linux-upgrade-bind-docoracle-linux-upgrade-bind-export-develoracle-linux-upgrade-bind-export-libsoracle-linux-upgrade-bind-libsoracle-linux-upgrade-bind-libs-liteoracle-linux-upgrade-bind-licenseoracle-linux-upgrade-bind-lite-develoracle-linux-upgrade-bind-pkcs11oracle-linux-upgrade-bind-pkcs11-develoracle-linux-upgrade-bind-pkcs11-libsoracle-linux-upgrade-bind-pkcs11-utilsoracle-linux-upgrade-bind-sdboracle-linux-upgrade-bind-sdb-chrootoracle-linux-upgrade-bind-utilsoracle-linux-upgrade-python3-bindoracle-linux-upgrade-python3-bind9-16 | Feb 25, 2025 | Jan 29, 2025 |
| Redhat Openshift | linuxrpm-upgrade-rhcos | Mar 6, 2025 | Jan 29, 2025 | |
| Redhat_linux | redhat-upgrade-bindredhat-upgrade-bind-chrootredhat-upgrade-bind-debuginforedhat-upgrade-bind-debugsourceredhat-upgrade-bind-develredhat-upgrade-bind-dnssec-docredhat-upgrade-bind-dnssec-utilsredhat-upgrade-bind-dnssec-utils-debuginforedhat-upgrade-bind-docredhat-upgrade-bind-export-develredhat-upgrade-bind-export-libsredhat-upgrade-bind-export-libs-debuginforedhat-upgrade-bind-libsredhat-upgrade-bind-libs-debuginforedhat-upgrade-bind-libs-literedhat-upgrade-bind-libs-lite-debuginforedhat-upgrade-bind-licenseredhat-upgrade-bind-lite-develredhat-upgrade-bind-pkcs11redhat-upgrade-bind-pkcs11-debuginforedhat-upgrade-bind-pkcs11-develredhat-upgrade-bind-pkcs11-libsredhat-upgrade-bind-pkcs11-libs-debuginforedhat-upgrade-bind-pkcs11-utilsredhat-upgrade-bind-pkcs11-utils-debuginforedhat-upgrade-bind-sdbredhat-upgrade-bind-sdb-chrootredhat-upgrade-bind-sdb-debuginforedhat-upgrade-bind-utilsredhat-upgrade-bind-utils-debuginforedhat-upgrade-bind9-16redhat-upgrade-bind9-16-chrootredhat-upgrade-bind9-16-debuginforedhat-upgrade-bind9-16-debugsourceredhat-upgrade-bind9-16-develredhat-upgrade-bind9-16-dnssec-utilsredhat-upgrade-bind9-16-dnssec-utils-debuginforedhat-upgrade-bind9-16-docredhat-upgrade-bind9-16-libsredhat-upgrade-bind9-16-libs-debuginforedhat-upgrade-bind9-16-licenseredhat-upgrade-bind9-16-utilsredhat-upgrade-bind9-16-utils-debuginforedhat-upgrade-bind9-18redhat-upgrade-bind9-18-chrootredhat-upgrade-bind9-18-debuginforedhat-upgrade-bind9-18-debugsourceredhat-upgrade-bind9-18-develredhat-upgrade-bind9-18-dnssec-utilsredhat-upgrade-bind9-18-dnssec-utils-debuginforedhat-upgrade-bind9-18-docredhat-upgrade-bind9-18-libsredhat-upgrade-bind9-18-libs-debuginforedhat-upgrade-bind9-18-utilsredhat-upgrade-bind9-18-utils-debuginforedhat-upgrade-python3-bindredhat-upgrade-python3-bind9-16 | Feb 20, 2025 | Jan 29, 2025 | |
| Rocky_linux | rocky-upgrade-bindrocky-upgrade-bind-chrootrocky-upgrade-bind-debuginforocky-upgrade-bind-debugsourcerocky-upgrade-bind-develrocky-upgrade-bind-dnssec-utilsrocky-upgrade-bind-dnssec-utils-debuginforocky-upgrade-bind-export-develrocky-upgrade-bind-export-libsrocky-upgrade-bind-export-libs-debuginforocky-upgrade-bind-libsrocky-upgrade-bind-libs-debuginforocky-upgrade-bind-libs-literocky-upgrade-bind-libs-lite-debuginforocky-upgrade-bind-lite-develrocky-upgrade-bind-pkcs11rocky-upgrade-bind-pkcs11-debuginforocky-upgrade-bind-pkcs11-develrocky-upgrade-bind-pkcs11-libsrocky-upgrade-bind-pkcs11-libs-debuginforocky-upgrade-bind-pkcs11-utilsrocky-upgrade-bind-pkcs11-utils-debuginforocky-upgrade-bind-sdbrocky-upgrade-bind-sdb-chrootrocky-upgrade-bind-sdb-debuginforocky-upgrade-bind-utilsrocky-upgrade-bind-utils-debuginforocky-upgrade-bind9.16rocky-upgrade-bind9.16-chrootrocky-upgrade-bind9.16-debuginforocky-upgrade-bind9.16-debugsourcerocky-upgrade-bind9.16-develrocky-upgrade-bind9.16-dnssec-utilsrocky-upgrade-bind9.16-dnssec-utils-debuginforocky-upgrade-bind9.16-libsrocky-upgrade-bind9.16-libs-debuginforocky-upgrade-bind9.16-utilsrocky-upgrade-bind9.16-utils-debuginforocky-upgrade-bind9.18rocky-upgrade-bind9.18-chrootrocky-upgrade-bind9.18-debuginforocky-upgrade-bind9.18-debugsourcerocky-upgrade-bind9.18-develrocky-upgrade-bind9.18-dnssec-utilsrocky-upgrade-bind9.18-dnssec-utils-debuginforocky-upgrade-bind9.18-libsrocky-upgrade-bind9.18-libs-debuginforocky-upgrade-bind9.18-utilsrocky-upgrade-bind9.18-utils-debuginfo | Feb 27, 2025 | Jan 29, 2025 | |
| Suse | — | suse-upgrade-bindsuse-upgrade-bind-chrootenvsuse-upgrade-bind-develsuse-upgrade-bind-docsuse-upgrade-bind-modules-genericsuse-upgrade-bind-modules-ldapsuse-upgrade-bind-modules-mysqlsuse-upgrade-bind-modules-perlsuse-upgrade-bind-modules-sqlite3suse-upgrade-bind-utilssuse-upgrade-libbind9-1600suse-upgrade-libbind9-161suse-upgrade-libdns1110suse-upgrade-libdns1605suse-upgrade-libirs-develsuse-upgrade-libirs1601suse-upgrade-libirs161suse-upgrade-libisc1107suse-upgrade-libisc1107-32bitsuse-upgrade-libisc1606suse-upgrade-libisccc1600suse-upgrade-libisccc161suse-upgrade-libisccfg1600suse-upgrade-libisccfg163suse-upgrade-liblwres161suse-upgrade-libns1604suse-upgrade-python-bindsuse-upgrade-python3-bind | Dec 5, 2025 | Feb 25, 2025 |
| Ubuntu | ubuntu-upgrade-bind9 | Jan 30, 2025 | Jan 29, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jul 2, 2025 | Jan 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub