Skip to content
Threat Feed
Subscribe

Product

BIND 9 (9.16.0 Through 9.18.50)

1 brief RSS
medium advisory

CVE-2026-11331: BIND 9 RPZ Bypass and Denial of Service Vulnerability

An attacker can exploit CVE-2026-11331, a flaw in ISC BIND 9's RPZ (Response Policy Zone) processing, by crafting long query names to trigger a mishandled NAMETOOLONG error, leading to either a bypass of RPZ rules or a denial of service due to an unexpected exit of the BIND 9 software.

BIND 9 +4 vulnerability denial-of-service dns bind networking
1c