Skip to content
OpenAdvisories
High DSA-5439-1 2 CVEs

bind9 - security update

Published Jun 25, 2023 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 11 bind9 1:9.16.42-1~deb11u1
Debian · 12 bind9 1:9.18.16-1~deb12u1

Vulnerabilities 2

  • High 7.5

    named's configured cache size limit can be significantly exceeded

    Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers. The size limit for that cache database can be configured using the `max-cache-size`…

  • High 7.5

    Exceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0

    If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-timeout 0;`, a sequence of serve-stale-related lookups could cause `named` to loop and terminate unexpectedly due to a st…