The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-pkcs11-develUpgrade bind-dnssec-docUpgrade bind9.18-dnssec-utilsUpgrade bind9.16-develUpgrade bind9.16-docUpgrade bind-sdbUpgrade bind9.18-develUpgrade bind-libs-liteUpgrade bind-lite-develUpgrade bind-dnssec-utilsUpgrade bind-pkcs11-libsUpgrade bind-docUpgrade bind9.16-libsUpgrade bind9.18-docUpgrade bind-export-libsUpgrade bind-export-develUpgrade bind-utilsUpgrade bind-chrootUpgrade bind9.16-utilsUpgrade bind9.18-utilsUpgrade bind9.16-dnssec-utilsUpgrade bind9.16Upgrade bind-pkcs11-utilsUpgrade bind-libsUpgrade python3-bindUpgrade bind-licenseUpgrade bind9.18Upgrade bind-pkcs11Upgrade python3-bind9.16Upgrade bind9.18-chrootUpgrade bindUpgrade bind-sdb-chrootUpgrade bind9.18-libsUpgrade bind-develUpgrade bind9.16-licenseUpgrade bind9.16-chroot | Oct 11, 2026 | Aug 13, 2026 |
| Alpine Linux | — | Upgrade bind | Jul 28, 2026 | Jul 22, 2026 |
| Amazon Linux Ami 2 | — | Upgrade bind-pkcs11-libsUpgrade bind-utilsUpgrade bind-develUpgrade bind-pkcs11-develUpgrade bind-sdb-chrootUpgrade bind-libsUpgrade bind-licenseUpgrade bind-pkcs11-utilsUpgrade bind-export-develUpgrade bind-sdbUpgrade bind-debuginfoUpgrade bind-export-libsUpgrade bind-chrootUpgrade bind-pkcs11Upgrade bind-libs-liteUpgrade bindUpgrade bind-lite-devel | Aug 5, 2026 | Aug 5, 2026 |
| Amazon_linux_2023 | — | Upgrade bind-debuginfoUpgrade bind-chrootUpgrade bind-docUpgrade bind-utilsUpgrade bind-develUpgrade bind-debugsourceUpgrade bind-libs-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-libsUpgrade bind-dnssec-utilsUpgrade bind-licenseUpgrade bind | Aug 10, 2026 | Jul 22, 2026 |
| Debian | — | Upgrade bind9 | Jul 28, 2026 | Jul 28, 2026 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Sep 18, 2026 | Sep 17, 2026 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory31 | Sep 16, 2026 | Sep 16, 2026 |
| Oracle_linux | — | Upgrade bindUpgrade bind9.18-docUpgrade bind-lite-develUpgrade bind-pkcs11Upgrade bind-docUpgrade bind9.16-chrootUpgrade bind-sdbUpgrade bind9.16-dnssec-utilsUpgrade bind-dnssec-docUpgrade bind-export-develUpgrade bind9.16-develUpgrade bind9.16-libsUpgrade bind9.18-libsUpgrade bind9.18-chrootUpgrade bind-pkcs11-utilsUpgrade bind9.16-docUpgrade bind-utilsUpgrade bind-chrootUpgrade bind-libs-liteUpgrade bind-export-libsUpgrade bind9.18-dnssec-utilsUpgrade python3-bindUpgrade bind9.18Upgrade bind9.16Upgrade bind9.18-develUpgrade bind-dnssec-utilsUpgrade bind-sdb-chrootUpgrade bind-pkcs11-develUpgrade bind9.18-utilsUpgrade bind-licenseUpgrade bind-libsUpgrade python3-bind9.16Upgrade bind9.16-utilsUpgrade bind-pkcs11-libsUpgrade bind-develUpgrade bind9.16-license | Oct 22, 2026 | Jul 22, 2026 |
| Redhat Openshift | — | Upgrade ose-rhel-coreos | Aug 26, 2026 | Jul 22, 2026 |
| Redhat_linux | — | Upgrade bind-export-libsUpgrade bind9.16-dnssec-utilsUpgrade bind-export-develUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind-libs-liteUpgrade bind-pkcs11-develUpgrade bindUpgrade bind-libs-debuginfoUpgrade bind9.18-libs-debuginfoUpgrade bind9.16-debuginfoUpgrade bind9.16-licenseUpgrade bind9.18Upgrade bind9.16-libsUpgrade bind-utils-debuginfoUpgrade bind-licenseUpgrade bind9.18-utilsUpgrade bind-pkcs11-utilsUpgrade bind9.18-develUpgrade bind9.18-libsUpgrade bind-dnssec-utils-debuginfoUpgrade bind-sdb-chrootUpgrade bind-develNo solution existsUpgrade bind-dnssec-utilsUpgrade bind-sdb-debuginfoUpgrade bind-debugsourceUpgrade bind9.16-docUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade bind9.16Upgrade bind-utilsUpgrade bind9.16-debugsourceUpgrade bind9.16-utilsUpgrade bind-libs-lite-debuginfoUpgrade bind-libsUpgrade bind-sdbUpgrade bind9.16-develUpgrade bind9.18-dnssec-utilsUpgrade python3-bind9.16Upgrade bind-lite-develUpgrade bind9.18-docUpgrade bind9.18-chrootUpgrade bind-pkcs11-libsUpgrade bind-export-libs-debuginfoUpgrade bind9.18-utils-debuginfoUpgrade bind-pkcs11Upgrade bind-pkcs11-utils-debuginfoUpgrade bind9.16-chrootUpgrade bind-pkcs11-debuginfoUpgrade python3-bindUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-debuginfoUpgrade bind9.18-debugsourceUpgrade bind-dnssec-docUpgrade bind9.18-debuginfoUpgrade bind-docUpgrade bind-chrootUpgrade bind9.16-libs-debuginfo | Jul 24, 2026 | Jul 22, 2026 |
| Rocky_linux | — | Upgrade bind9.18-dnssec-utilsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind9.18-utils-debuginfoUpgrade bind-chrootUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-pkcs11-libsUpgrade bind-utilsUpgrade bind-libs-liteUpgrade bind9.16Upgrade bind-libsUpgrade bind-sdbUpgrade bind9.18-chrootUpgrade bind-debuginfoUpgrade bind9.16-develUpgrade bind9.16-utils-debuginfoUpgrade bind9.18-debugsourceUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind9.18-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind-export-libs-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-lite-develUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bind9.16-debugsourceUpgrade bind-pkcs11-develUpgrade bindUpgrade bind-utils-debuginfoUpgrade bind-dnssec-utilsUpgrade bind9.18-libs-debuginfoUpgrade bind9.18-develUpgrade bind9.18Upgrade bind-develUpgrade bind-libs-debuginfoUpgrade bind-export-develUpgrade bind-pkcs11Upgrade bind9.16-libsUpgrade bind9.16-chrootUpgrade bind-sdb-debuginfoUpgrade bind9.18-libsUpgrade bind9.18-utilsUpgrade bind-export-libsUpgrade bind9.16-utilsUpgrade bind-sdb-chrootUpgrade bind-debugsourceUpgrade bind9.16-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind9.16-dnssec-utils | Aug 17, 2026 | Aug 15, 2026 |
| Ubuntu | — | Upgrade bind9 (Ubuntu Pro)Upgrade bind9 | Aug 19, 2026 | Aug 19, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 17, 2026 | Jul 22, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub