Cybersecuritynews

BIND 9 Vulnerability Allows Remote DNS Server Crashes via Malicious Records

First seen 22 Jan 2026, 21:42 UTC • Cybersecuritynews

•30.6

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A high-severity vulnerability in BIND 9, tracked as CVE-2025-13878, allows remote attackers to crash DNS servers by sending specially crafted malformed DNS records. This flaw affects the widely used DNS server software, potentially disrupting critical internet infrastructure and services. The vulnerability is linked to the handling of malformed BRID and HHIT records.

Ask AI about this cluster

Answers cite the sources they use

How this analysis works

Timeline

Date unknown

Vulnerability disclosed

Recent

Exploit released

Date unknown

Patch released

Attack Flow

Continue Reading

Critical DNS Vulnerabilities in ISC BIND 9 Require Immediate Patching Critical DNS Vulnerabilities in Fedora BIND 9.21.22 Require Immediate Attention Critical Vulnerabilities in Android, Cisco, and BIND 9 Exposed Multiple BIND 9 Versions Released to Address Vulnerabilities

BIND 9 Vulnerability Allows Remote DNS Server Crashes via Malicious Records

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading