The vulnerability of the Bind9 DNS server package arises from errors in processing “update-policy” rules of the “subdomain” type. This allows attackers to update all parts of the DNS zone along with the subdomain for which an update is scheduled.

The vulnerability of the Bind9 DNS server package is related to errors in processing “update-policy” rules of the “subdomain” type, such as “zoneub”. Exploiting this vulnerability allows a malicious actor to update all parts of the DNS zone, including the subdomain for which updates are scheduled...