]> git.ipfire.org Git - thirdparty/bind9.git/commit
[9.16] [CVE-2026-5950] sec: usr: Avoid unbounded recursion loop
authorColin Vidal <colin@isc.org>
Thu, 30 Apr 2026 15:49:02 +0000 (17:49 +0200)
committerColin Vidal <colin@isc.org>
Thu, 30 Apr 2026 15:49:02 +0000 (17:49 +0200)
commit379ca10cf34759d0c007cebcd9280911161bca1a
tree3ae7fa0d38a93209c7780c2eb51288509cdad0e2
parent35a73d7d90ee3dd269499ccd0248d730626df68e
parenteb73df0cebc8909a030a0db66d4366e2181bd3f5
[9.16] [CVE-2026-5950] sec: usr: Avoid unbounded recursion loop

A bug during bad server handling could cause the resolver to enter an infinite loop, continuously sending queries to an upstream server with no exit condition, until the resolver query timeout was hit. This has been fixed.

ISC would like to thank Billy Baraja (BielraX) for bringing this issue to our attention.

Closes isc-projects/bind9#5804

Backport of !985

Merge branch 'backport-5804-resend-loop-9.16' into 'security-bind-9.16'

See merge request isc-private/bind9!993