Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
BIND DNS server can be bypassed with overly long queries
published 3 months ago
Summary
If your DNS service uses BIND and applies custom rule sets that redirect queries (called RPZ), an attacker can send specially crafted, very long domain names. This can cause BIND to ignore the protection rules or even stop working. Update BIND to the latest release or apply the vendor's patch to fix the handling of long names.
What to do
- Update echo bind9 to version 1:9.20.26-1~deb13u1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Echo | echo | bind9 |
< 1:9.20.26-1~deb13u1 Fix: upgrade to 1:9.20.26-1~deb13u1
|
Original advisory text
ECHO-d176-cede-4ce1
References
Timeline
Published23 Jul 2026
Updated23 Jul 2026
First seen23 Jul 2026
Sources
ECHO-d176-cede-4ce1 · OSV
Track software like this
Free during beta