This vulnerability involves the ISC BIND 9 DNS server improperly handling multiple copies of a record that should be unique in a query response, such as an SOA record. When the RDATA is identical across these copies, the server appends each to the in-memory RDATA set, causing increased memory consumption in the negative cache. This asymmetric resource consumption can be exploited to amplify memory usage, potentially leading to denial of service or other memory-based attacks. The affected versions include 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and their respective S1 variants.

The impact is limited to increased memory usage in the negative cache of the BIND 9 server, which can degrade performance and potentially open avenues for further memory-related attacks. There is no impact on confidentiality or integrity, and no known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitoring for unusual memory consumption and limiting exposure of vulnerable BIND 9 servers to untrusted networks may reduce risk.