BIND 9 Vulnerability Allows Attackers to Crash DNS Servers Using Malicious Records

Cyberpress • January 22, 2026

The vulnerability exists in BIND's handling of malformed BRID (Boundary Router Identifier) and HHIT (Host Identity Tag) records. When a vulnerable ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

BIND 9 Vulnerability Allows Remote DNS Server Crashes via Malicious Records A high-severity vulnerability in BIND 9, tracked as CVE-2025-13878, allows remote attackers to crash DNS servers by sending specially crafted malformed DNS records. This flaw affects the widely used DNS server software, potentially disrupting critical internet infrastructure and services. The vulnerability is linked to the handling of malformed BRID and HHIT records. 3 sources 31

BIND 9 Vulnerability Allows Attackers to Crash DNS Servers Using Malicious Records

The full story

Extracted Entities

Attack Types (1)

Platforms (1)