CVE-2026-11331

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.16.0 through 9.18.50 BIND 9 versions 9.20.0 through 9.20.24 BIND 9 versions 9.21.0 through 9.21.23 BIND 9 versions 9.16.8-S1 through 9.18.50-S1 BIND 9 versions 9.20.9-S1 through 9.20.24-S1

Description An attacker can craft query names of sufficient length to trigger a NAMETOOLONG error condition during the processing of Response Policy Zones (RPZ) when wildcard CNAME policies are used. This error is not handled correctly, which may allow the attacker to bypass the RPZ rule or cause the software to exit unexpectedly.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.