Vulnerability Spotlight: Internet Systems Consortium BIND server DoS

Summary: Cisco Talos disclosed a denial-of-service vulnerability in the Internet Systems Consortium's BIND server, affecting versions 9.16.1 through 9.17.1 when processing TCP traffic through the libuv library. An attacker can flood the TCP port used for larger DNS requests (AXFR) with unauthenticated packets, causing a length passed by libuv to violate an assertion check and terminate the service.
What's compelling: BIND is the reference implementation of the Domain Name System, so a single unauthenticated flood of its TCP port can take down a nameserver that may be serving as both authoritative server and recursive cache on a network.

Read the original at Cisco Talos ↗

Topics: Endpoint & Network Security
Mentions: CVE-2020-8620
Related: Vulnerability Spotlight: Use-after-free vulnerability in Google Chrome WebGL could lead to code execution Cyber Risks ·
Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026
Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026