Skip to content

CVE-2025-13878

CVE

Threat entity extracted from intelligence sources

Frequency
5
occurrences
First Seen
January 22, 2026
Last Seen
February 7, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A critical security update has been issued for the Fedora bind-dyndb-ldap package, addressing CVE-2025-13878. This vulnerability involves incorrect length checks for BRID and HHIT records, which could potentially lead to denial of service. Users are advised to update to version 9.18.44 to mitigate t...

A high-severity vulnerability in BIND 9, tracked as CVE-2025-13878, allows remote attackers to crash DNS servers by sending specially crafted malformed DNS records. This flaw affects the widely used DNS server software, potentially disrupting critical internet infrastructure and services. The vulner...

Fedora 43 has released an urgent patch for BIND version 9.18.45 addressing a critical DoS vulnerability. The patch corrects improper length checks for BRID and HHIT records, identified as CVE-2025-13878. Users of BIND should update to version 9.18.44 to mitigate this security issue.

Public Exploits

Checking GitHub for proof-of-concept code…