CVE-2025-13878CWE-1286CWE-617

CVE-2025-13878

High · published January 21, 2026

CVSS v3.1
7.5
EPSS
9%
Percentile
95.4
In the wild
Unconfirmed
What it is

⚡ A malformed BRID/HHIT record could send your BIND `named` service crashing down faster than a house of cards! 🎴 Think of it like a restaurant ordering system that crashes when a waiter inputs an incorrect dish code — one wrong entry, and the whole kitchen is thrown into chaos! 🍽️ If an attacker crafts a specific malformed record, it could cause the DNS server to terminate unexpectedly, leading to potential downtime for your services. This could disrupt your network operations, leaving your users in the dark!

Put simply

Think of it like a restaurant ordering system that crashes when a waiter inputs an incorrect dish code — one wrong entry, and the whole kitchen is thrown into chaos! 🍽️ This vulnerability in BIND 9 versions 9.18.40 through 9.21.16 allows an attacker to exploit malformed BRID/HHIT records, causing the `named` server to abort unexpectedly when processing these records.

What to do

If an attacker crafts a specific malformed record, it could cause the DNS server to terminate unexpectedly, leading to potential downtime for your services. This could disrupt your network operations, leaving your users in the dark! To mitigate this risk, update your BIND installations to versions 9.18.44, 9.20.18, or 9.21.17 immediately. Regularly review server logs for any unusual activity and implement monitoring to catch issues early! You’ve got this! Follow these steps, and you’ll restore stability to your DNS services in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.09423 · 95.4th percentile
Weaknesses
CWE-1286 · Improper Validation of Syntactic Correctness of Input; CWE-617 · Reachable Assertion
Published
2026-01-21T20:16Z
References (9)
EPSS history
Timeline
  • 21 JAN 14:43Z
    Malformed BRID/HHIT records can cause named to terminate unexpectedly
    cvelistv5