Alerts This Week
Warning Icon 1 1,308
Alerts This Week
Warning Icon 1 1,308

Debian Oldstable BIND9 Critical Denial of Service DSA-6107-1 CVE-2025-13878

debian
Calendar Grey January 22, 2026
Debian Logo
BIND DNS Server faces denial of service risk from malformed records. Upgrade to latest version for safety.
Vlatko Kosturjak discovered that BIND, a DNS server implementation, does not properly handle malformed BRID/HHIT records, which may result in denial of service (named daemon crash)
Topics%20covered

Topics Covered

security advisory denial of service debian important bind9 oldstable

Summary

For the oldstable distribution (bookworm), this problem has been fixed
in version 1:9.18.44-1~deb12u1.

For the stable distribution (trixie), this problem has been fixed in
version 1:9.20.18-1~deb13u1.

We recommend that you upgrade your bind9 packages.

For the detailed security status of bind9 please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/source-package/bind9

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
important
Lowest
Low
Medium
High
Critical

Package: bind9
CVE ID: CVE-2025-13878

Topics%20covered

Topics Covered

security advisory denial of service debian important bind9 oldstable

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here