Denial Of Service

Bind9 is vulnerable to denial of service. The vulnerability is due to asynchronous processes of named running as a recursive resolver component of BIND, when attempting to clean up its cache database which enables the list of queued cleanup events to grow infinitely large over time, allowing the configured max-cache-size limit to be significantly exceeded. The vulnerability could be exploited by an attacker to cause the BIND service to consume excessive resources, leading to performance degradation or unresponsiveness and also potentially can impact the availability and reliability of DNS resolution services.