Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers. The size limit for that cache database can be configured using the `max-cache-size` statement in the configuration file; it defaults to 90% of the total amount of memory available on the host. When the size of the cache reaches 7/8 of the configured limit, a cache-cleaning algorithm starts to remove expired and/or least-recently used RRsets from the cache, to keep memory use below the configured limit.
It has been discovered that the effectiveness of the cache-cleaning algorithm used in `named` can be severely diminished by querying the resolver for specific RRsets in a certain order, effectively allowing the configured `max-cache-size` limit to be significantly exceeded. This issue affects BIND 9 versions 9.11.0 through 9.16.41, 9.18.0 through 9.18.15, 9.19.0 through 9.19.13, 9.11.3-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-export-libsUpgrade bind-dnssec-utilsUpgrade bind-sdbUpgrade bind9.16-utilsUpgrade bind-utilsUpgrade bind9.16-licenseUpgrade bind-export-develUpgrade bind-pkcs11-develUpgrade bindUpgrade bind9.16-docUpgrade bind-docUpgrade bind9.16-libsUpgrade bind-licenseUpgrade bind-dnssec-docUpgrade bind-libs-liteUpgrade bind9.16Upgrade python3-bind9.16Upgrade bind-pkcs11-libsUpgrade bind-chrootUpgrade python3-bindUpgrade bind-develUpgrade bind-sdb-chrootUpgrade bind9.16-dnssec-utilsUpgrade bind-libsUpgrade bind9.16-develUpgrade bind-lite-develUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11Upgrade bind9.16-chroot | Jul 19, 2023 | Jun 21, 2023 |
| Amazon Linux Ami 2 | — | Upgrade bind-export-libsUpgrade bind-sdb-chrootUpgrade bind-pkcs11-utilsUpgrade bind-utilsUpgrade bind-libs-liteUpgrade bind-debuginfoUpgrade bind-develUpgrade bind-licenseUpgrade bind-export-develUpgrade bind-pkcs11-develUpgrade bind-pkcs11Upgrade bind-lite-develUpgrade bind-libsUpgrade bindUpgrade bind-pkcs11-libsUpgrade bind-sdbUpgrade bind-chroot | Jul 21, 2023 | Jun 21, 2023 |
| Amazon_linux | — | Upgrade bind | Jul 26, 2023 | Jun 21, 2023 |
| Amazon_linux_2023 | — | Upgrade python3-bindUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-chrootUpgrade bind-dlz-filesystem-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-utilsUpgrade bind-dlz-filesystemUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-utilsUpgrade bind-dnssec-docUpgrade bind-docUpgrade bind-dlz-sqlite3Upgrade bind-debuginfoUpgrade bindUpgrade bind-develUpgrade bind-licenseUpgrade bind-dnssec-utils-debuginfoUpgrade bind-dlz-mysql-debuginfoUpgrade bind-pkcs11Upgrade bind-dlz-sqlite3-debuginfoUpgrade bind-dlz-mysqlUpgrade bind-dlz-ldap-debuginfoUpgrade bind-debugsourceUpgrade bind-pkcs11-develUpgrade bind-libsUpgrade bind-dlz-ldapUpgrade bind-utils-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-libs-debuginfo | Feb 17, 2025 | Jun 21, 2023 |
| Centos_linux | — | Upgrade bind-pkcs11-develUpgrade bind-utilsUpgrade bind-lite-develUpgrade bind-chrootUpgrade bind-pkcs11-libsUpgrade bind-libs-liteUpgrade bind-sdbUpgrade bind-licenseUpgrade bind-pkcs11-utilsUpgrade bind-libsUpgrade bind-sdb-chrootUpgrade bind-pkcs11Upgrade bind-export-develUpgrade bind-export-libsUpgrade bindUpgrade bind-debuginfoUpgrade bind-devel | Jul 18, 2023 | Jun 21, 2023 |
| Debian | — | Upgrade bind9 | Jul 4, 2023 | Jun 21, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Aug 1, 2023 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade dhcp | Jan 10, 2024 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bind-chrootUpgrade bind-pkcs11Upgrade bind-utilsUpgrade bind-dnssec-docUpgrade bindUpgrade bind-dnssec-utilsUpgrade bind-libsUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11-libsUpgrade bind-licenseUpgrade python3-bind | Jan 10, 2024 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bindUpgrade bind-libsUpgrade bind-export-libsUpgrade bind-libs-liteUpgrade bind-pkcs11-libsUpgrade python3-bindUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-pkcs11Upgrade bind-export-develUpgrade bind-pkcs11-utilsUpgrade bind-license | Jan 10, 2024 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade dhcp | Aug 9, 2023 | Jun 21, 2023 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory24 | Sep 8, 2023 | Jun 21, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade bind-lite-develUpgrade bind9.16-docUpgrade bind-pkcs11-libsUpgrade bind-sdb-chrootUpgrade bind9.16-develUpgrade python3-bindUpgrade bind-dnssec-utilsUpgrade bind9.16-libsUpgrade bind9.16-utilsUpgrade bind9.16-licenseUpgrade bind-pkcs11-develUpgrade bind-utilsUpgrade bind-dnssec-docUpgrade bind-docUpgrade bind9.16-chrootUpgrade bind9.16Upgrade bind-export-develUpgrade bind-pkcs11Upgrade bind-licenseUpgrade bind-sdbUpgrade bind-libsUpgrade bind-libs-liteUpgrade bind-export-libsUpgrade bind-develUpgrade python3-bind9.16Upgrade bind-pkcs11-utilsUpgrade bind9.16-dnssec-utilsUpgrade bind-chrootUpgrade bind | Jul 20, 2023 | Jun 21, 2023 |
| Redhat_linux | — | Upgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-export-libsUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-debuginfoUpgrade bind-docUpgrade bind-utilsUpgrade bind9.16-utilsUpgrade bind-utils-debuginfoUpgrade bind9.16-develUpgrade bind-libs-debuginfoUpgrade bind9.16-debugsourceUpgrade bind-lite-develUpgrade bind-dnssec-docUpgrade bind9.16-docUpgrade bind9.16-debuginfoUpgrade bind-chrootUpgrade bind-dnssec-utils-debuginfoUpgrade python3-bindUpgrade bind9.16-libsUpgrade bind-libs-liteUpgrade bind-pkcs11-develUpgrade bind-debuginfoUpgrade bindUpgrade bind-libsUpgrade bind-debugsourceUpgrade bind9.16-chrootUpgrade bind-sdbUpgrade bind9.16-licenseUpgrade bind-sdb-chrootUpgrade bind-licenseUpgrade bind-libs-lite-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade bind-export-develUpgrade bind-sdb-debuginfoUpgrade bind9.16Upgrade bind9.16-libs-debuginfoUpgrade bind-export-libs-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-pkcs11Upgrade bind-develUpgrade python3-bind9.16Upgrade bind9.16-utils-debuginfo | Jul 13, 2023 | Jun 21, 2023 |
| Rocky_linux | — | Upgrade bind-sdb-chrootUpgrade bind-pkcs11-utilsUpgrade bind9.16-dnssec-utilsUpgrade bind-develUpgrade bind9.16-libsUpgrade bind-dnssec-utils-debuginfoUpgrade bind-debugsourceUpgrade bind-export-develUpgrade bind-libs-liteUpgrade bind-dnssec-utilsUpgrade bind-pkcs11-develUpgrade bind-sdb-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-export-libsUpgrade bindUpgrade bind9.16-debuginfoUpgrade bind9.16-chrootUpgrade bind-sdbUpgrade bind-pkcs11Upgrade bind-chrootUpgrade bind9.16-debugsourceUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-debuginfoUpgrade bind9.16-utilsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-lite-develUpgrade bind-utilsUpgrade bind-libs-lite-debuginfoUpgrade bind9.16Upgrade bind9.16-libs-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-libsUpgrade bind-export-libs-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-pkcs11-libsUpgrade bind9.16-devel | Mar 5, 2024 | Jun 21, 2023 |
| Suse | — | Upgrade libisccc1600-32bitUpgrade bind-libsUpgrade libisc1107-32bitUpgrade libisccfg1600-32bitUpgrade bind-chrootenvUpgrade libisc1107Upgrade python3-bindUpgrade liblwres161Upgrade bindUpgrade libirs-develUpgrade libdns1605Upgrade bind-devel-32bitUpgrade libns1604-32bitUpgrade bind-develUpgrade libbind9-161Upgrade libisccc1600Upgrade libirs1601-32bitUpgrade libirs161Upgrade libns1604Upgrade bind-docUpgrade libisc1606Upgrade bind-utilsUpgrade libisccfg163Upgrade libdns1110Upgrade libdns1605-32bitUpgrade libisccfg1600Upgrade libirs1601Upgrade python-bindUpgrade libbind9-1600Upgrade bind-libs-32bitUpgrade libisccc161Upgrade libbind9-1600-32bitUpgrade libisc1606-32bit | Jun 29, 2023 | Jun 21, 2023 |
| Ubuntu | — | Upgrade bind9Upgrade bind9 (Ubuntu Pro) | Jun 22, 2023 | Jun 21, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 21, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub