CVE-2026-11622

EUVD-2026-47708

22.07.2026, 15:16

A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter.
This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 42.36%

Debian Releases

Debian Product

Codename

bind9

bookworm	vulnerable
bookworm (security)	1:9.18.49-1~deb12u2 fixed
forky	1:9.20.27-1 fixed
sid	1:9.20.27-2 fixed
trixie	vulnerable
trixie (security)	1:9.20.26-1~deb13u1 fixed

Ubuntu Releases

Ubuntu Product

Codename

bind9

bionic	needs-triage
focal	needs-triage
jammy	Fixed 1:9.18.39-0ubuntu0.22.04.5 released
noble	Fixed 1:9.18.39-0ubuntu0.24.04.6 released
resolute	Fixed 1:9.20.24-1ubuntu0.2 released
trusty	needs-triage
xenial	needs-triage

isc-dhcp

bionic	needs-triage
focal	not-affected
jammy	not-affected
noble	needs-triage
resolute	needs-triage
trusty	not-affected
xenial	not-affected

bind9-libs

focal	needs-triage
jammy	needs-triage
noble	dne
resolute	dne

openSUSE / SLES Releases

openSUSE Product

Release

bind

suse enterprise sap 12 SP5	9.11.22-3.74.1 fixed
suse enterprise sap 15 SP4	9.16.50-150400.5.65.1 fixed
suse enterprise sap 15 SP5	9.16.50-150500.8.41.1 fixed
suse enterprise sap 15 SP6	9.18.50-150600.3.32.1 fixed
suse enterprise sap 15 SP7	9.20.26-150700.3.29.1 fixed
suse enterprise server 12 SP5	9.11.22-3.74.1 fixed
suse enterprise server 15 SP4	9.16.50-150400.5.65.1 fixed
suse enterprise server 15 SP5	9.16.50-150500.8.41.1 fixed
suse enterprise server 15 SP6	9.18.50-150600.3.32.1 fixed
suse enterprise server 15 SP7	9.20.26-150700.3.29.1 fixed

bind-chrootenv

suse enterprise sap 12 SP5	9.11.22-3.74.1 fixed
suse enterprise server 12 SP5	9.11.22-3.74.1 fixed

bind-devel

suse enterprise sap 12 SP5	9.11.22-3.74.1 fixed
suse enterprise server 12 SP5	9.11.22-3.74.1 fixed

bind-doc

suse enterprise sap 12 SP5	9.11.22-3.74.1 fixed
suse enterprise sap 15 SP4	9.16.50-150400.5.65.1 fixed
suse enterprise sap 15 SP5	9.16.50-150500.8.41.1 fixed
suse enterprise sap 15 SP6	9.18.50-150600.3.32.1 fixed
suse enterprise sap 15 SP7	9.20.26-150700.3.29.1 fixed
suse enterprise server 12 SP5	9.11.22-3.74.1 fixed
suse enterprise server 15 SP4	9.16.50-150400.5.65.1 fixed
suse enterprise server 15 SP5	9.16.50-150500.8.41.1 fixed
suse enterprise server 15 SP6	9.18.50-150600.3.32.1 fixed
suse enterprise server 15 SP7	9.20.26-150700.3.29.1 fixed

bind-utils

suse enterprise desktop 15 SP7	9.20.26-150700.3.29.1 fixed
suse enterprise sap 12 SP5	9.11.22-3.74.1 fixed
suse enterprise sap 15 SP4	9.16.50-150400.5.65.1 fixed
suse enterprise sap 15 SP5	9.16.50-150500.8.41.1 fixed
suse enterprise sap 15 SP6	9.18.50-150600.3.32.1 fixed
suse enterprise sap 15 SP7	9.20.26-150700.3.29.1 fixed
suse enterprise server 12 SP5	9.11.22-3.74.1 fixed
suse enterprise server 15 SP4	9.16.50-150400.5.65.1 fixed
suse enterprise server 15 SP5	9.16.50-150500.8.41.1 fixed
suse enterprise server 15 SP6	9.18.50-150600.3.32.1 fixed
suse enterprise server 15 SP7	9.20.26-150700.3.29.1 fixed

libbind9-161

suse enterprise sap 12 SP5	9.11.22-3.74.1 fixed
suse enterprise server 12 SP5	9.11.22-3.74.1 fixed

libdns1110

suse enterprise sap 12 SP5	9.11.22-3.74.1 fixed
suse enterprise server 12 SP5	9.11.22-3.74.1 fixed

libdns1605

suse enterprise desktop 15 SP7	9.16.6-150300.22.62.1 fixed
suse enterprise sap 15 SP6	9.16.6-150300.22.62.1 fixed
suse enterprise sap 15 SP7	9.16.6-150300.22.62.1 fixed
suse enterprise server 15 SP6	9.16.6-150300.22.62.1 fixed
suse enterprise server 15 SP7	9.16.6-150300.22.62.1 fixed

libirs-devel

suse enterprise desktop 15 SP7	9.16.6-150300.22.62.1 fixed
suse enterprise sap 15 SP6	9.16.6-150300.22.62.1 fixed
suse enterprise sap 15 SP7	9.16.6-150300.22.62.1 fixed
suse enterprise server 15 SP6	9.16.6-150300.22.62.1 fixed
suse enterprise server 15 SP7	9.16.6-150300.22.62.1 fixed

libirs1601

suse enterprise desktop 15 SP7	9.16.6-150300.22.62.1 fixed
suse enterprise sap 15 SP6	9.16.6-150300.22.62.1 fixed
suse enterprise sap 15 SP7	9.16.6-150300.22.62.1 fixed
suse enterprise server 15 SP6	9.16.6-150300.22.62.1 fixed
suse enterprise server 15 SP7	9.16.6-150300.22.62.1 fixed

libirs161

suse enterprise sap 12 SP5	9.11.22-3.74.1 fixed
suse enterprise server 12 SP5	9.11.22-3.74.1 fixed

libisc1107

suse enterprise sap 12 SP5	9.11.22-3.74.1 fixed
suse enterprise server 12 SP5	9.11.22-3.74.1 fixed

libisc1107-32bit

suse enterprise sap 12 SP5	9.11.22-3.74.1 fixed
suse enterprise server 12 SP5	9.11.22-3.74.1 fixed

libisc1606

suse enterprise desktop 15 SP7	9.16.6-150300.22.62.1 fixed
suse enterprise sap 15 SP6	9.16.6-150300.22.62.1 fixed
suse enterprise sap 15 SP7	9.16.6-150300.22.62.1 fixed
suse enterprise server 15 SP6	9.16.6-150300.22.62.1 fixed
suse enterprise server 15 SP7	9.16.6-150300.22.62.1 fixed

libisccc161

suse enterprise sap 12 SP5	9.11.22-3.74.1 fixed
suse enterprise server 12 SP5	9.11.22-3.74.1 fixed

libisccfg1600

suse enterprise desktop 15 SP7	9.16.6-150300.22.62.1 fixed
suse enterprise sap 15 SP6	9.16.6-150300.22.62.1 fixed
suse enterprise sap 15 SP7	9.16.6-150300.22.62.1 fixed
suse enterprise server 15 SP6	9.16.6-150300.22.62.1 fixed
suse enterprise server 15 SP7	9.16.6-150300.22.62.1 fixed

libisccfg163

suse enterprise sap 12 SP5	9.11.22-3.74.1 fixed
suse enterprise server 12 SP5	9.11.22-3.74.1 fixed

liblwres161

suse enterprise sap 12 SP5	9.11.22-3.74.1 fixed
suse enterprise server 12 SP5	9.11.22-3.74.1 fixed

python-bind

suse enterprise sap 12 SP5	9.11.22-3.74.1 fixed
suse enterprise server 12 SP5	9.11.22-3.74.1 fixed

python3-bind

suse enterprise sap 15 SP4	9.16.50-150400.5.65.1 fixed
suse enterprise sap 15 SP5	9.16.50-150500.8.41.1 fixed
suse enterprise server 15 SP4	9.16.50-150400.5.65.1 fixed
suse enterprise server 15 SP5	9.16.50-150500.8.41.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

bind

RHEL 8	32:9.11.36-16.el8_10.14 fixed
RHEL 9	32:9.16.23-40.el9_8.8 fixed

bind-chroot

RHEL 8	32:9.11.36-16.el8_10.14 fixed
RHEL 9	32:9.16.23-40.el9_8.8 fixed

bind-devel

RHEL 8	32:9.11.36-16.el8_10.14 fixed
RHEL 9	32:9.16.23-40.el9_8.8 fixed

bind-dnssec-doc

RHEL 9

32:9.16.23-40.el9_8.8

fixed

bind-dnssec-utils

RHEL 9

32:9.16.23-40.el9_8.8

fixed

bind-doc

RHEL 9

32:9.16.23-40.el9_8.8

fixed

bind-export-devel

RHEL 8

32:9.11.36-16.el8_10.14

fixed

bind-export-libs

RHEL 8

32:9.11.36-16.el8_10.14

fixed

bind-libs

RHEL 8	32:9.11.36-16.el8_10.14 fixed
RHEL 9	32:9.16.23-40.el9_8.8 fixed

bind-libs-lite

RHEL 8

32:9.11.36-16.el8_10.14

fixed

bind-license

RHEL 8	32:9.11.36-16.el8_10.14 fixed
RHEL 9	32:9.16.23-40.el9_8.8 fixed

bind-lite-devel

RHEL 8

32:9.11.36-16.el8_10.14

fixed

bind-pkcs11

RHEL 8

32:9.11.36-16.el8_10.14

fixed

bind-pkcs11-devel

RHEL 8

32:9.11.36-16.el8_10.14

fixed

bind-pkcs11-libs

RHEL 8

32:9.11.36-16.el8_10.14

fixed

bind-pkcs11-utils

RHEL 8

32:9.11.36-16.el8_10.14

fixed

bind-sdb

RHEL 8

32:9.11.36-16.el8_10.14

fixed

bind-sdb-chroot

RHEL 8

32:9.11.36-16.el8_10.14

fixed

bind-utils

RHEL 8	32:9.11.36-16.el8_10.14 fixed
RHEL 9	32:9.16.23-40.el9_8.8 fixed

bind9.16

RHEL 8

32:9.16.23-0.22.el8_10.12

fixed

bind9.16-chroot

RHEL 8

32:9.16.23-0.22.el8_10.12

fixed

bind9.16-devel

RHEL 8

32:9.16.23-0.22.el8_10.12

fixed

bind9.16-dnssec-utils

RHEL 8

32:9.16.23-0.22.el8_10.12

fixed

bind9.16-doc

RHEL 8

32:9.16.23-0.22.el8_10.12

fixed

bind9.16-libs

RHEL 8

32:9.16.23-0.22.el8_10.12

fixed

bind9.16-license

RHEL 8

32:9.16.23-0.22.el8_10.12

fixed

bind9.16-utils

RHEL 8

32:9.16.23-0.22.el8_10.12

fixed

bind9.18

RHEL 9

32:9.18.29-14.el9_8.8

fixed

bind9.18-chroot

RHEL 9

32:9.18.29-14.el9_8.8

fixed

bind9.18-devel

RHEL 9

32:9.18.29-14.el9_8.8

fixed

bind9.18-dnssec-utils

RHEL 9

32:9.18.29-14.el9_8.8

fixed

bind9.18-doc

RHEL 9

32:9.18.29-14.el9_8.8

fixed

bind9.18-libs

RHEL 9

32:9.18.29-14.el9_8.8

fixed

bind9.18-utils

RHEL 9

32:9.18.29-14.el9_8.8

fixed

python3-bind

RHEL 8	32:9.11.36-16.el8_10.14 fixed
RHEL 9	32:9.16.23-40.el9_8.8 fixed

python3-bind9.16

RHEL 8

32:9.16.23-0.22.el8_10.12

fixed

Amazon Linux Releases

Amazon Package

Release

bind

Amazon Linux 2	32:9.11.4-26.P2.amzn2.13.17 fixed
Amazon Linux 2023	32:9.18.50-1.amzn2023.0.2 fixed

bind-chroot

Amazon Linux 2	32:9.11.4-26.P2.amzn2.13.17 fixed
Amazon Linux 2023	32:9.18.50-1.amzn2023.0.2 fixed

bind-debuginfo

Amazon Linux 2	32:9.11.4-26.P2.amzn2.13.17 fixed
Amazon Linux 2023	32:9.18.50-1.amzn2023.0.2 fixed

bind-debugsource

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.2

fixed

bind-devel

Amazon Linux 2	32:9.11.4-26.P2.amzn2.13.17 fixed
Amazon Linux 2023	32:9.18.50-1.amzn2023.0.2 fixed

bind-dnssec-utils

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.2

fixed

bind-dnssec-utils-debuginfo

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.2

fixed

bind-doc

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.2

fixed

bind-export-devel

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.17

fixed

bind-export-libs

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.17

fixed

bind-libs

Amazon Linux 2	32:9.11.4-26.P2.amzn2.13.17 fixed
Amazon Linux 2023	32:9.18.50-1.amzn2023.0.2 fixed

bind-libs-debuginfo

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.2

fixed

bind-libs-lite

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.17

fixed

bind-license

Amazon Linux 2	32:9.11.4-26.P2.amzn2.13.17 fixed
Amazon Linux 2023	32:9.18.50-1.amzn2023.0.2 fixed

bind-lite-devel

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.17

fixed

bind-pkcs11

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.17

fixed

bind-pkcs11-devel

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.17

fixed

bind-pkcs11-libs

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.17

fixed

bind-pkcs11-utils

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.17

fixed

bind-sdb

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.17

fixed

bind-sdb-chroot

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.17

fixed

bind-utils

Amazon Linux 2	32:9.11.4-26.P2.amzn2.13.17 fixed
Amazon Linux 2023	32:9.18.50-1.amzn2023.0.2 fixed

bind-utils-debuginfo

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.2

fixed

Azure Linux Releases

Azure Package

Release

bind

Azure Linux 3.0

0:9.20.26-1.azl3

fixed

Common Weakness Enumeration

CWE-770 - Allocation of Resources Without Limits or Throttling
The software allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References

https://downloads.isc.org/isc/bind9/9.20.26

https://downloads.isc.org/isc/bind9/9.21.24

https://kb.isc.org/docs/cve-2026-11622