CyberRota Analysis
AI-GeneratedBIND resolvers are vulnerable to a flaw that can cause an unexpected program exit when processing certain DNSSEC responses involving wildcard answers and NSEC3 proofs. This vulnerability affects multiple versions of BIND 9, and its exploitation could lead to service disruptions. Organizations using affected BIND versions should prioritize patching to mitigate potential downtime and ensure DNS service reliability.
Original NVD Description
If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.