CERT24BIND 9 Update Fixes 14 Security FlawsLoading data…
CERT24Threat Observatory
Period

BIND 9 Update Fixes 14 Security Flaws

The Internet Systems Consortium (ISC) released BIND 9.20.29 and 9.21.26 to fix fourteen security flaws. One flaw allows an unauthenticated sender to crash the named server process over DNS-over-HTTPS with a single request containing an invalid SIG(0) signature, if the connection is closed before signature verification finishes. ISC said it is not aware of any active exploitation of the flaws.

← Back to intelligence

BIND 9 Update Fixes 14 Security Flaws

The Internet Systems Consortium (ISC) released BIND 9.20.29 and 9.21.26 to fix fourteen security flaws. One flaw allows an unauthenticated sender to crash the named server process over DNS-over-HTTPS with a single request containing an invalid SIG(0) signature, if the connection is closed before signature verification finishes. ISC said it is not aware of any active exploitation of the flaws.