Synopsis
The remote name server is affected by an allow-recursion vulnerability.
Description
According to its self-reported version, the instance of ISC BIND 9 running on the remote name server is 9.9.12, 9.10.7, 9.11.3, 9.12.0 prior to or equal to 9.12.1-P2, development release 9.13.0, 9.9.12-S1, 9.11.3-S1, or 9.11.3-S2. It is, therefore, affected by an allow-recursion vulnerability which exists in the named.conf due to a regression issue introduced by change #4777.
An unauthenticated, remote attacker can exploit this to cause undesirable behavior such as a degradation or denial of service, DNS reflection attacks, or potentially leak private information about what queries have been performed.
Solution
Upgrade to ISC BIND version 9.9.13 / 9.10.8 / 9.11.4 / 9.12.2 or later or apply the workaround as per the vendor advisory.