CLEANSTART-2025-DK15000

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2025/CLEANSTART-2025-DK15000.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2025-DK15000
Upstream
Published
2026-10-31T14:00:08Z
Modified
2026-10-31T16:03:26Z
Severity
  • 8.6 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H CVSS Calculator
Summary
malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafted referrals, cause ...
Details

Security vulnerability affects the bind package. A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafted referrals, cause a recursing server to issue a very large number of fetches in an attempt to process the referral.

References

Affected packages

CleanStart / bind

Package

Name
bind
Purl
pkg:apk/cleanstart/bind

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.14.12-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2025/CLEANSTART-2025-DK15000.json"