CyberRota Analysis
AI-GeneratedBIND resolvers that encounter an SVCB/HTTPS AliasMode record with 14 or more associated ServiceMode records are vulnerable to resource exhaustion due to improper deallocation of internal resources. This can lead to the resolver being unable to perform new recursive lookups, severely impacting DNS resolution capabilities. Organizations using affected versions of BIND 9 should prioritize applying patches to mitigate this high-severity vulnerability.
Original NVD Description
A BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records may fail to properly deallocate internal resources. If this happens repeatedly, resource exhaustion will eventually prevent the resolver from performing new recursive lookups. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.