A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing the redirect.
BIND resolver deployments that are configured with both a redirect zone and strict QNAME minimization are affected. The provided information does not indicate that either setting is enabled by default.
The assertion failure can occur when the resolver processes the redirect while both the redirect zone and qname-minimization strict configuration are present. No additional attacker prerequisites or request details are provided.
Avoid using the affected configuration combination by disabling or changing either the redirect zone configuration or strict QNAME minimization, if operationally acceptable. The supplied data does not provide a more specific workaround.
Review BIND resolver configuration for both a redirect zone and qname-minimization set to strict. Systems with both settings should be treated as potentially affected.