CVE-2026-11331

EUVD-2026-47706

22.07.2026, 15:16

An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may lead to an unexpected exit of the BIND 9 software.
This issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.16.8-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 35.74%

Debian Releases

Debian Product

Codename

bind9

bookworm	vulnerable
bookworm (security)	1:9.18.49-1~deb12u2 fixed
forky	1:9.20.27-1 fixed
sid	1:9.20.27-2 fixed
trixie	vulnerable
trixie (security)	1:9.20.26-1~deb13u1 fixed

Ubuntu Releases

Ubuntu Product

Codename

bind9

bionic	needs-triage
focal	needs-triage
jammy	Fixed 1:9.18.39-0ubuntu0.22.04.5 released
noble	Fixed 1:9.18.39-0ubuntu0.24.04.6 released
resolute	Fixed 1:9.20.24-1ubuntu0.2 released
trusty	needs-triage
xenial	needs-triage

isc-dhcp

bionic	needs-triage
focal	not-affected
jammy	not-affected
noble	needs-triage
resolute	needs-triage
trusty	not-affected
xenial	not-affected

bind9-libs

focal	needs-triage
jammy	needs-triage
noble	dne
resolute	dne

openSUSE / SLES Releases

openSUSE Product

Release

bind

suse enterprise sap 15 SP4	9.16.50-150400.5.65.1 fixed
suse enterprise sap 15 SP5	9.16.50-150500.8.41.1 fixed
suse enterprise sap 15 SP6	9.18.50-150600.3.32.1 fixed
suse enterprise sap 15 SP7	9.20.26-150700.3.29.1 fixed
suse enterprise server 15 SP4	9.16.50-150400.5.65.1 fixed
suse enterprise server 15 SP5	9.16.50-150500.8.41.1 fixed
suse enterprise server 15 SP6	9.18.50-150600.3.32.1 fixed
suse enterprise server 15 SP7	9.20.26-150700.3.29.1 fixed

bind-doc

suse enterprise sap 15 SP4	9.16.50-150400.5.65.1 fixed
suse enterprise sap 15 SP5	9.16.50-150500.8.41.1 fixed
suse enterprise sap 15 SP6	9.18.50-150600.3.32.1 fixed
suse enterprise sap 15 SP7	9.20.26-150700.3.29.1 fixed
suse enterprise server 15 SP4	9.16.50-150400.5.65.1 fixed
suse enterprise server 15 SP5	9.16.50-150500.8.41.1 fixed
suse enterprise server 15 SP6	9.18.50-150600.3.32.1 fixed
suse enterprise server 15 SP7	9.20.26-150700.3.29.1 fixed

bind-utils

suse enterprise desktop 15 SP7	9.20.26-150700.3.29.1 fixed
suse enterprise sap 15 SP4	9.16.50-150400.5.65.1 fixed
suse enterprise sap 15 SP5	9.16.50-150500.8.41.1 fixed
suse enterprise sap 15 SP6	9.18.50-150600.3.32.1 fixed
suse enterprise sap 15 SP7	9.20.26-150700.3.29.1 fixed
suse enterprise server 15 SP4	9.16.50-150400.5.65.1 fixed
suse enterprise server 15 SP5	9.16.50-150500.8.41.1 fixed
suse enterprise server 15 SP6	9.18.50-150600.3.32.1 fixed
suse enterprise server 15 SP7	9.20.26-150700.3.29.1 fixed

libdns1605

suse enterprise desktop 15 SP7	9.16.6-150300.22.62.1 fixed
suse enterprise sap 15 SP6	9.16.6-150300.22.62.1 fixed
suse enterprise sap 15 SP7	9.16.6-150300.22.62.1 fixed
suse enterprise server 15 SP6	9.16.6-150300.22.62.1 fixed
suse enterprise server 15 SP7	9.16.6-150300.22.62.1 fixed

libirs-devel

suse enterprise desktop 15 SP7	9.16.6-150300.22.62.1 fixed
suse enterprise sap 15 SP6	9.16.6-150300.22.62.1 fixed
suse enterprise sap 15 SP7	9.16.6-150300.22.62.1 fixed
suse enterprise server 15 SP6	9.16.6-150300.22.62.1 fixed
suse enterprise server 15 SP7	9.16.6-150300.22.62.1 fixed

libirs1601

suse enterprise desktop 15 SP7	9.16.6-150300.22.62.1 fixed
suse enterprise sap 15 SP6	9.16.6-150300.22.62.1 fixed
suse enterprise sap 15 SP7	9.16.6-150300.22.62.1 fixed
suse enterprise server 15 SP6	9.16.6-150300.22.62.1 fixed
suse enterprise server 15 SP7	9.16.6-150300.22.62.1 fixed

libisc1606

suse enterprise desktop 15 SP7	9.16.6-150300.22.62.1 fixed
suse enterprise sap 15 SP6	9.16.6-150300.22.62.1 fixed
suse enterprise sap 15 SP7	9.16.6-150300.22.62.1 fixed
suse enterprise server 15 SP6	9.16.6-150300.22.62.1 fixed
suse enterprise server 15 SP7	9.16.6-150300.22.62.1 fixed

libisccfg1600

suse enterprise desktop 15 SP7	9.16.6-150300.22.62.1 fixed
suse enterprise sap 15 SP6	9.16.6-150300.22.62.1 fixed
suse enterprise sap 15 SP7	9.16.6-150300.22.62.1 fixed
suse enterprise server 15 SP6	9.16.6-150300.22.62.1 fixed
suse enterprise server 15 SP7	9.16.6-150300.22.62.1 fixed

python3-bind

suse enterprise sap 15 SP4	9.16.50-150400.5.65.1 fixed
suse enterprise sap 15 SP5	9.16.50-150500.8.41.1 fixed
suse enterprise server 15 SP4	9.16.50-150400.5.65.1 fixed
suse enterprise server 15 SP5	9.16.50-150500.8.41.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

bind

RHEL 9

32:9.16.23-40.el9_8.8

fixed

bind-chroot

RHEL 9

32:9.16.23-40.el9_8.8

fixed

bind-devel

RHEL 9

32:9.16.23-40.el9_8.8

fixed

bind-dnssec-doc

RHEL 9

32:9.16.23-40.el9_8.8

fixed

bind-dnssec-utils

RHEL 9

32:9.16.23-40.el9_8.8

fixed

bind-doc

RHEL 9

32:9.16.23-40.el9_8.8

fixed

bind-libs

RHEL 9

32:9.16.23-40.el9_8.8

fixed

bind-license

RHEL 9

32:9.16.23-40.el9_8.8

fixed

bind-utils

RHEL 9

32:9.16.23-40.el9_8.8

fixed

bind9.16

RHEL 8

32:9.16.23-0.22.el8_10.12

fixed

bind9.16-chroot

RHEL 8

32:9.16.23-0.22.el8_10.12

fixed

bind9.16-devel

RHEL 8

32:9.16.23-0.22.el8_10.12

fixed

bind9.16-dnssec-utils

RHEL 8

32:9.16.23-0.22.el8_10.12

fixed

bind9.16-doc

RHEL 8

32:9.16.23-0.22.el8_10.12

fixed

bind9.16-libs

RHEL 8

32:9.16.23-0.22.el8_10.12

fixed

bind9.16-license

RHEL 8

32:9.16.23-0.22.el8_10.12

fixed

bind9.16-utils

RHEL 8

32:9.16.23-0.22.el8_10.12

fixed

bind9.18

RHEL 9

32:9.18.29-14.el9_8.8

fixed

bind9.18-chroot

RHEL 9

32:9.18.29-14.el9_8.8

fixed

bind9.18-devel

RHEL 9

32:9.18.29-14.el9_8.8

fixed

bind9.18-dnssec-utils

RHEL 9

32:9.18.29-14.el9_8.8

fixed

bind9.18-doc

RHEL 9

32:9.18.29-14.el9_8.8

fixed

bind9.18-libs

RHEL 9

32:9.18.29-14.el9_8.8

fixed

bind9.18-utils

RHEL 9

32:9.18.29-14.el9_8.8

fixed

python3-bind

RHEL 9

32:9.16.23-40.el9_8.8

fixed

python3-bind9.16

RHEL 8

32:9.16.23-0.22.el8_10.12

fixed

Amazon Linux Releases

Amazon Package

Release

bind

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.2

fixed

bind-chroot

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.2

fixed

bind-debuginfo

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.2

fixed

bind-debugsource

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.2

fixed

bind-devel

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.2

fixed

bind-dnssec-utils

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.2

fixed

bind-dnssec-utils-debuginfo

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.2

fixed

bind-doc

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.2

fixed

bind-libs

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.2

fixed

bind-libs-debuginfo

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.2

fixed

bind-license

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.2

fixed

bind-utils

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.2

fixed

bind-utils-debuginfo

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.2

fixed

Azure Linux Releases

Azure Package

Release

bind

Azure Linux 3.0

0:9.20.26-1.azl3

fixed

Common Weakness Enumeration

CWE-790 - Improper Filtering of Special Elements
The software receives data from an upstream component, but does not filter or incorrectly filters special elements before sending it to a downstream component.

References

https://downloads.isc.org/isc/bind9/9.20.26

https://downloads.isc.org/isc/bind9/9.21.24

https://kb.isc.org/docs/cve-2026-11331