CLEANSTART-2025-PZ89979

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2025/CLEANSTART-2025-PZ89979.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2025-PZ89979
Upstream
Published
2026-10-31T14:00:39Z
Modified
2026-10-31T16:03:33Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named
Details

Security vulnerability affects the bind package. BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named.

References

Affected packages

CleanStart / bind

Package

Name
bind
Purl
pkg:apk/cleanstart/bind

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.11.2_p1-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2025/CLEANSTART-2025-PZ89979.json"