CVE-2026-11605

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.20.0 through 9.20.24 BIND 9 versions 9.21.0 through 9.21.23 BIND 9 versions 9.20.9-S1 through 9.20.24-S1

Description Resource exhaustion occurs during DNSSEC validation because the system validates all RRSIG records in an answer, including those not strictly required. A query to an authoritative server or zone that returns numerous valid but superfluous RRSIG records causes the validator to consume excessive CPU time.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.