CyberRota Analysis
AI-GeneratedBIND versions 9.20.0 to 9.20.27, 9.21.0 to 9.21.25, and 9.20.9-S1 to 9.20.27-S1 are vulnerable when configured with a `named.conf` file lacking a global `options` block, allowing attackers to trigger an assertion failure via a TKEY query, leading to an unexpected program exit. This vulnerability poses a high risk as it can disrupt DNS services and potentially enable further exploitation. Organizations using affected BIND versions should prioritize applying patches or configuration changes to mitigate this risk.
Original NVD Description
If BIND is loaded with a "`named.conf`" file that contains no global "`options`" block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure and subsequent unexpected program exit. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1.