STIGQter: STIG Summary: BIND 9.x Security Technical Implementation Guide Version: 3 Release: 3 Benchmark Date: 01 Jul 2026:

The BIND 9.x server implementation must limit the number of allowed dynamic update clients.

DISA Rule

SV-275939r1156959_rule

Vulnerability Number

V-275939

Group Title

SRG-APP-000516-DNS-000109

Rule Version

BIND-9X-002480

Severity

CAT II

CCI(s)

• CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.

Weight

10

Fix Recommendation

Edit the named.conf file

options {
...
update-quota <integer>;
...
};

After making changes, save the named.conf file and restart the BIND service to apply the changes.

Check Contents

Verify the update-quota option is present and set to an organization defined limit.

Inspect the named.conf file for the following

options {
...
update-quota <integer>;
...
};

If update-quota option is missing or limit not set, this is a finding.

Vulnerability Number

V-275939

Documentable

False

Rule Version

BIND-9X-002480

Severity Override Guidance

Verify the update-quota option is present and set to an organization defined limit.

Inspect the named.conf file for the following

options {
...
update-quota <integer>;
...
};

If update-quota option is missing or limit not set, this is a finding.

Check Content Reference

M

Target Key

5687