CVE-2025-13878: Malformed BRID/HHIT records can cause named to terminate unexpectedly

Description

Malformed BRID/HHIT records can cause `named` to terminate unexpectedly. This issue affects BIND 9 versions 9.18.40 through 9.18.43, 9.20.13 through 9.20.17, 9.21.12 through 9.21.16, 9.18.40-S1 through 9.18.43-S1, and 9.20.13-S1 through 9.20.17-S1.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)9.4% · higher than 95% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

B9

BIND 9 · ISC

9.18.40 through 9.18.43; 9.20.13 through 9.20.17; 9.21.12 through 9.21.16; 9.18.40-S1 through 9.18.43-S1; 9.20.13-S1 through 9.20.17-S1 · source: vendor

RH

Red Hat Hardened Images · Red Hat

All versions, or not specified · source: CISA

RH

Red Hat OpenShift Container Platform 4 · Red Hat

All versions, or not specified · source: CISA