U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

BIND 9.x STIG Ver 3, Rel 1 Checklist Details (Checklist Revisions)

Supporting Resources:

Target:

Target CPE Name
BIND 9.x cpe:/a:isc:bind:9.0 (View CVEs)

Checklist Highlights

Checklist Name:
BIND 9.x STIG
Checklist ID:
784
Version:
Ver 3, Rel 1
Type:
Compliance
Review Status:
Final
Authority:
Governmental Authority: Defense Information Systems Agency
Original Publication Date:
07/28/2017

Checklist Summary:

The Berkeley Internet Name Domain (BIND) 9.x Security Technical Implementation Guide (STIG) is published as a tool to improve the security of the Department of Defense (DOD) Domain Name System (DNS) infrastructure. The requirements were developed from federal and DOD consensus based on the DNS Security Requirements Guide (SRG). The vulnerabilities discussed in this document are applicable to a BIND 9.x DNS implementation installed on a Unix/Linux operating system). This document should be applied to all DOD DNS implementations running BIND 9.x as an external name server, an internal name server, or a caching (recursive) name server.

Checklist Role:

  • DNS Server

Known Issues:

Not provided.

Target Audience:

Not provided.

Target Operational Environment:

  • Managed
  • Specialized Security-Limited Functionality (SSLF)

Testing Information:

Not provided.

Regulatory Compliance:

DoD Instruction (DoDI) 8500.01

Comments/Warnings/Miscellaneous:

Comments or proposed revisions to this document should be sent via email to the following address: [email protected]. DISA will coordinate all change requests with the relevant DOD organizations before inclusion in this document. Approved changes will be made in accordance with the DISA maintenance release schedule.

Disclaimer:

Not provided.

Product Support:

Not provided.

Point of Contact:

[email protected]

Sponsor:

Not provided.

Licensing:

Not provided.

Change History:

updated to v1,r3 - 02/16/2018
Updated to FINAL - 3/18/2018
updated to v1,r4 - 4/25/18
Updated to FINAL - 5/25/18
updated to  Ver 1, Rel 5 - 1/22/19
Updated to FINAL - 2/19/19
updated to Ver 1, Rel 6- 4/30/19
Updated URLs - 6/5/19
Updated URLs - 8/12/2019
updated URLs per DISA - 1/21/2020
Updated URLs per DISA - 4/24/2020
Updated resource per DISA - 1/27/21
Updated resource per DISA - 7/29/21
Update Version and Resources - 06/10/2024
Updated Version, Resources, General - 12/5/2025

Dependency/Requirements:

URL Description

References:

Reference URL Description

NIST checklist record last modified on 12/05/2025