BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resources. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.
{
"source": "CPE_RANGE",
"cpe": "cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*",
"extracted_events": [
{
"introduced": "9.11.0"
},
{
"last_affected": "9.16.50"
},
{
"introduced": "9.18.0"
},
{
"fixed": "9.18.49"
},
{
"introduced": "9.20.0"
},
{
"fixed": "9.20.23"
},
{
"introduced": "9.21.0"
},
{
"fixed": "9.21.22"
}
]
}{
"source": "CPE_RANGE",
"cpe": "cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*",
"extracted_events": [
{
"introduced": "9.11.0"
},
{
"last_affected": "9.16.50"
},
{
"introduced": "9.18.0"
},
{
"fixed": "9.18.49"
},
{
"introduced": "9.20.0"
},
{
"fixed": "9.20.23"
},
{
"introduced": "9.21.0"
},
{
"fixed": "9.21.22"
}
]
}