ReadWriteEnterprise

The Internet Systems Consortium (ISC) is reporting a major vulnerability in BIND 9, with an apparent exploit in the wild. According to the announcement, servers running BIND 9 and performing recursive queries should upgrade immediately.

The actual exploit for this vulnerability is not yet reported. ISC says that it will cause a resolver to cache an invalid record, then crash when responding to queries that request that record.