Back Cybersecuritynews

BIND 9 Vulnerability Allow Attackers to Crash Server by Sending Malicious Records

Cybersecuritynews •Abinaya • January 22, 2026

A high-severity vulnerability has been disclosed in BIND 9, the widely used DNS server software responsible for domain name resolution across millions of internet services. The vulnerability, tracked as CVE-2025-13878, enables remote attackers to crash DNS servers by sending specially crafted, malformed DNS records, potentially disrupting critical internet infrastructure and organizational services. The vulnerability stems […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

BIND 9 Vulnerability Allows Remote DNS Server Crashes via Malicious Records A high-severity vulnerability in BIND 9, tracked as CVE-2025-13878, allows remote attackers to crash DNS servers by sending specially crafted malformed DNS records. This flaw affects the widely used DNS server software, potentially disrupting critical internet infrastructure and services. The vulnerability is linked to the handling of malformed BRID and HHIT records. 3 sources 31

Extracted Entities

CVEs (1)

CVE-2025-13878

Platforms (1)

BIND 9