The Internet Systems Consortium has released BIND versions 9.20.29 and 9.21.26 to address fourteen security issues. Most notably, a critical flaw allows unauthenticated attackers to crash the DNS server daemon using a single malformed DNS-over-HTTPS request. Administrators should apply the updates immediately to prevent denial of service.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →