CVE-2025-8677

Name of the Vulnerable Software and Affected Versions BIND versions 9.18.0 through 9.18.39 BIND versions 9.20.0 through 9.20.13 BIND versions 9.21.0 through 9.21.12 BIND versions 9.18.11-S1 through 9.18.39-S1 BIND versions 9.20.9-S1 through 9.20.13-S1

Description Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion.

Recommendations Update BIND to a version later than 9.18.39. Update BIND to a version later than 9.20.13. Update BIND to a version later than 9.21.12. Update BIND to a version later than 9.18.39-S1. Update BIND to a version later than 9.20.13-S1.