Denial Of Service (DoS)

libbind9.so is vulnerable to Denial Of Service. The vulnerability exists if the recursive-clients quota is reached on a BIND 9 resolver configured with both stale-answer-enable yes and stale-answer-client-timeout 0, which leads to a sequence of serve-stale-related lookups could cause the named to loop and terminate unexpectedly due to a stack overflow, allowing an attacker to cause an application crash.