CVE-2026-75029

A flaw was found in BIND 9. A remote attacker could send multiple copies of a single record in a query response to the named service. This could lead to increased memory usage in the negative cache, potentially causing a Denial of Service (DoS) due to memory exhaustion.

This Moderate impact denial of service vulnerability in BIND 9 allows a remote attacker to exhaust memory resources by sending crafted query responses containing duplicate records. This can lead to increased memory usage in the negative cache, potentially disrupting DNS services on affected Red Hat systems running BIND.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, restrict network access to the BIND named service to only trusted clients and networks. Implement firewall rules to limit incoming UDP/TCP port 53 traffic to known, legitimate sources. This reduces the attack surface by preventing untrusted external entities from sending crafted query responses.