Memory Consumption Flaw in BIND 9 by ISC

CVE-2026-11622

What is CVE-2026-11622?

A vulnerability exists in BIND 9 affecting its DNSSEC validating resolver that can lead to excessive memory utilization during random subdomain attacks. This occurs when an attacker sends validation queries at a rate that outpaces the resolver's processing capability, resulting in memory consumption that far exceeds the limits set by the max-cache-size configuration parameter. As a result, the resolver may become unstable, impacting its performance and the services reliant upon it.

References