{"id":"CLSA-2026-1786525602","summary":"bind: Fix of CVE-2023-6516","details":"- CVE-2023-6516: bound the memory used to queue RBTDB tree-pruning events, so\n  that recursive query patterns which continuously trigger cache-database\n  maintenance can no longer exceed max-cache-size and exhaust host memory (DoS)\n- CVE-2023-6516 follow-up: make the tree-pruning queue per-node-lock bucketed\n  and process it in quanta, so that the queue introduced above does not starve\n  cache cleanup under load and let cache memory grow without bound\n- CVE-2023-6516 follow-up: handle a node being re-queued for tree pruning\n  gracefully instead of asserting, and do not append a parent to a pruning\n  list it is already on, avoiding an assertion failure (DoS) and pruning-list\n  corruption reachable through normal cache activity\n- CVE-2023-6516 follow-up: adopt the pruning design upstream settled on in\n  9.16.49 - run tree pruning on a dedicated task with an unlimited quantum\n  instead of sharing the quantum-1 cache database task, clean every eligible\n  ancestor in a single pass, and re-create both tasks when the cache is\n  flushed so that pruning keeps working after \"rndc flush\"","modified":"2026-10-26T09:31:58.528241418Z","published":"2026-08-12T09:06:50Z","upstream":["CVE-2023-6516"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1786525602.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6516"}],"affected":[{"package":{"name":"bind","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/bind?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1786525602.json"}},{"package":{"name":"bind-chroot","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/bind-chroot?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1786525602.json"}},{"package":{"name":"bind-devel","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/bind-devel?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1786525602.json"}},{"package":{"name":"bind-export-devel","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/bind-export-devel?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1786525602.json"}},{"package":{"name":"bind-export-libs","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/bind-export-libs?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1786525602.json"}},{"package":{"name":"bind-libs","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/bind-libs?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1786525602.json"}},{"package":{"name":"bind-libs-lite","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/bind-libs-lite?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1786525602.json"}},{"package":{"name":"bind-license","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/bind-license?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1786525602.json"}},{"package":{"name":"bind-lite-devel","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/bind-lite-devel?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1786525602.json"}},{"package":{"name":"bind-pkcs11","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/bind-pkcs11?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1786525602.json"}},{"package":{"name":"bind-pkcs11-devel","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/bind-pkcs11-devel?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1786525602.json"}},{"package":{"name":"bind-pkcs11-libs","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/bind-pkcs11-libs?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1786525602.json"}},{"package":{"name":"bind-pkcs11-utils","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/bind-pkcs11-utils?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1786525602.json"}},{"package":{"name":"bind-sdb","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/bind-sdb?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1786525602.json"}},{"package":{"name":"bind-sdb-chroot","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/bind-sdb-chroot?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1786525602.json"}},{"package":{"name":"bind-utils","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/bind-utils?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els15"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1786525602.json"}}],"schema_version":"1.9.0"}