Skip to content
BIND 9 Vulnerability Allows Remote DNS Server Crashes via Malicious Records

BIND 9 Vulnerability Allows Remote DNS Server Crashes via Malicious Records

First seen 22 Jan 2026, 21:42 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

A high-severity vulnerability in BIND 9, tracked as CVE-2025-13878, allows remote attackers to crash DNS servers by sending specially crafted malformed DNS records. This flaw affects the widely used DNS server software, potentially disrupting critical internet infrastructure and services. The vulnerability is linked to the handling of malformed BRID and HHIT records.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 221d ago How this analysis works

Timeline

Date unknown
Vulnerability disclosed
Recent
Exploit released
Date unknown
Patch released

More articles in this cluster (3)

Following this threat?

Track CVE-2025-13878 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed