Description (CNA)
Malformed BRID/HHIT records can cause `named` to terminate unexpectedly. This issue affects BIND 9 versions 9.18.40 through 9.18.43, 9.20.13 through 9.20.17, 9.21.12 through 9.21.16, 9.18.40-S1 through 9.18.43-S1, and 9.20.13-S1 through 9.20.17-S1.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ISC / BIND 9 | affected 9.18.40 through 9.18.43; affected 9.20.13 through 9.20.17; affected 9.21.12 through 9.21.16; affected 9.18.40-S1 through 9.18.43-S1; affected 9.20.13-S1 through 9.20.17-S1 |
CWE
CWE-617
References
- https://kb.isc.org/docs/cve-2025-13878
- https://downloads.isc.org/isc/bind9/9.18.44
- https://downloads.isc.org/isc/bind9/9.20.18
- https://downloads.isc.org/isc/bind9/9.21.17
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.
A flaw was found in bind. A remote attacker can send a specially crafted request that results in a corrupt or malicious record, causing the 'named' service to crash. This vulnerability leads to a Denial of Service (DoS) for authoritative servers and resolvers.