InformationBIND includes a built-in zone, version.bind which may be queried to get the version of the name server. The version may be set to a value of none, to disable reporting of the version information.
Making detailed BIND version information easy to obtain remotely helps attackers automate and target their attacks. The information is not necessary for the health of the server, and should not be disclosed.
SolutionAdd or modify the version option to have a value of none in the BIND global options, as shown below.
. . .
Default value returns the current BIND detailed version.