REDHAT-BUG-2405830: High severity ISC BIND vulnerability
Published Oct 22, 2025
·Updated
Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion.
Affected Software
1 affected component
ISC BIND
Event History
Oct 22, 2025
Data Sourced
via Red Hat·03:24 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What kind of query traffic can trigger the issue?
The issue is triggered by queries for records in a specially crafted DNS zone that contains certain malformed DNSKEY records.
2
What is the operational impact of successful exploitation?
Processing the affected queries can exhaust CPU resources, potentially degrading or denying DNS service.