Lame cache can be abused to severely degrade resolver performance
En bref
Sévérité
MEDIUM 5.3
EPSS
EPSS 10.95 % · centile 96 (2026-10-27)
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
isc
Statut NVD
Modified
Description
In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it possible for its internal data structures to grow almost infinitely, which may cause significant delays in client query processing.
affected Open Source Branches 9.3 through 9.11 9.3.0 through versions before 9.11.36 ; affected Open Source Branches 9.12 through 9.16 9.12.0 through versions before 9.16.22 ; affected Supported Preview Branches 9.9-S through 9.11-S 9.9.3-S1 through versions before 9.11.36-S1 ; affected Supported Preview Branch 9.16-S 9.16.8-S1 through versions before 9.16.22-S1 ; affected Development Branch 9.17 9.17.0 through versions before 9.17.19
