CyberRota Analysis
AI-GeneratedThe vulnerability affects BIND 9 DNS servers, specifically versions 9.18.0 to 9.18.50 and 9.20.0 to 9.20.24, leading to unexpected program termination when handling certain query responses for DNAME or CNAME records. This can result in service disruption, making the DNS resolver unresponsive, which could impact network availability for users. Organizations using the affected BIND versions should prioritize patching to mitigate potential downtime and maintain service reliability.
Original NVD Description
The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A query but delays the DNAME response and later responds negatively, `named` may quit unexpectedly. Or, if a client queries for a CNAME and A record for the same name to the resolver, and the authoritative server responds positively to the A query but delays the CNAME response and later responds with a self-referential CNAME, the same failure may occur. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.