CyberRota Analysis
AI-GeneratedBIND 9 versions 9.20.0 to 9.20.27, 9.21.0 to 9.21.25, and 9.20.9-S1 to 9.20.27-S1 are vulnerable to an attacker-induced crash of the `named` service via a malformed DNS-over-HTTPS request containing an invalid SIG(0) record. This vulnerability can lead to service disruption, making it critical for organizations using affected BIND versions to prioritize patching to maintain DNS reliability and security. Network administrators and security teams should act promptly to mitigate potential denial-of-service risks.
Original NVD Description
An attacker can cause `named` to abort by sending a crafted DNS-over-HTTPS request with a cryptographically invalid SIG(0) record, and then closing the transport connection prematurely. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1.