CVEvulnerability

CVE-2025-8677

7.5 HIGH Published 2025-10-22 Modified 2026-10-08 Official page ↗
Status
Deferred
Published
2025-10-22
Last modified
2026-10-08
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-405

Description

Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Related

Weakness · CWE (1)

  • CWE-405 Asymmetric Resource Consumption (Amplification) weakness

References