As cited
Copy frozen at (site build).
vulnerabilities
BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS
The Internet Systems Consortium released BIND 9.20.29 and 9.21.26 to address fourteen security flaws in its DNS server software, disclosed on September 16. One vulnerability allows unauthenticated attackers to crash servers running DNS-over-HTTPS (DoH) with a single malformed request carrying an invalid signature.
Why it matters: Organizations operating BIND DNS servers, particularly those offering DoH services, must apply these patches immediately to prevent denial of service attacks from unauthenticated adversaries.
- Source published
- First seen by Cybersecurity Tracker