Every CVE Search/ Get API key

CVE-2026-5946

Invalid handling of CLASS != IN

7.5 HighFix available

Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet (IN) — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes (ANY or NONE) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (UPDATE), zone change notifications (NOTIFY), or processing of IN-specific record types in non-IN data — can cause assertion failures in named. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.94%Up 1.9 points since May 21, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.5

Invalid handling of CLASS != IN

Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet (IN) — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes (ANY or NONE) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (UPDATE), zone change notifications (NOTIFY), or processing of IN-specific record types in non-IN data — can cause assertion failures in named. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Record
CVE-2026-5946
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-20, CWE-125, CWE-617, CWE-754, CWE-843, CWE-1287
Updated
2026-11-02
EUVDEUVD-2026-31107 7.5

Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet (IN) — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes (ANY or NONE) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (UPDATE), zone change notifications (NOTIFY), or processing of IN-specific record types in non-IN data — can cause assertion failures in named. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Record
EUVD-2026-31107
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-cqgq-ff3f-rj7r 7.5

Multiple flaws have been identified in `named` related to the handling of DNS messages whose...

Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet (IN) — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes (ANY or NONE) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (UPDATE), zone change notifications (NOTIFY), or processing of IN-specific record types in non-IN data — can cause assertion failures in named. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Record
GHSA-cqgq-ff3f-rj7r
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-20, CWE-1287
Updated
2026-11-02
NVD 7.5

Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet (IN) — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes (ANY or NONE) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (UPDATE), zone change notifications (NOTIFY), or processing of IN-specific record types in non-IN data — can cause assertion failures in named. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Record
CVE-2026-5946
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-20, CWE-125, CWE-617, CWE-754, CWE-843, CWE-1287
Updated
2026-11-02
OSVALPINE-CVE-2026-5946 7.5

Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet (IN) — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes (ANY or NONE) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (UPDATE), zone change notifications (NOTIFY), or processing of IN-specific record types in non-IN data — can cause assertion failures in named. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Record
ALPINE-CVE-2026-5946
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2026-5946 7.5
Record
BELL-CVE-2026-5946
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 48 moreShow less
OSV 7.5

Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet (IN) — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes (ANY or NONE) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (UPDATE), zone change notifications (NOTIFY), or processing of IN-specific record types in non-IN data — can cause assertion failures in named. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Record
CVE-2026-5946
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2026-5946 7.5

Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet (IN) — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes (ANY or NONE) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (UPDATE), zone change notifications (NOTIFY), or processing of IN-specific record types in non-IN data — can cause assertion failures in named. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Record
DEBIAN-CVE-2026-5946
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2600 7.5

bind security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-3039)

BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resources. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-3592)

Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet (IN) — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes (ANY or NONE) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (UPDATE), zone change notifications (NOTIFY), or processing of IN-specific record types in non-IN data — can cause assertion failures in named. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-5946)

Record
OESA-2026-2600
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2601 7.5

bind security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-3039)

BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resources. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-3592)

Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet (IN) — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes (ANY or NONE) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (UPDATE), zone change notifications (NOTIFY), or processing of IN-specific record types in non-IN data — can cause assertion failures in named. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-5946)

Record
OESA-2026-2601
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2655 7.5

bind security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-3039)

BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resources. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-3592)

Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet (IN) — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes (ANY or NONE) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (UPDATE), zone change notifications (NOTIFY), or processing of IN-specific record types in non-IN data — can cause assertion failures in named. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-5946)

Record
OESA-2026-2655
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2656 7.5

bind security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-3039)

BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resources. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-3592)

Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet (IN) — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes (ANY or NONE) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (UPDATE), zone change notifications (NOTIFY), or processing of IN-specific record types in non-IN data — can cause assertion failures in named. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-5946)

Record
OESA-2026-2656
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:20334 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:20334
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:23360 7.5

Red Hat Security Advisory: bind9.16 security update

Record
RHSA-2026:23360
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:24338 7.5

Red Hat Security Advisory: bind security update

Record
RHSA-2026:24338
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:24339 7.5

Red Hat Security Advisory: bind security update

Record
RHSA-2026:24339
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:24367 7.5

Red Hat Security Advisory: bind security update

Record
RHSA-2026:24367
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:24368 7.5

Red Hat Security Advisory: bind9.18 security update

Record
RHSA-2026:24368
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:55441 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2026:55441
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:57189 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2026:57189
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:60383 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2026:60383
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:79160 8.6

Red Hat Security Advisory: bind9.16 security, bug fix, and enhancement update

Record
RHSA-2026:79160
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:23360 7.5

Important: bind9.16 security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)

  • bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:23360
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:24338 7.5

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)

  • bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:24338
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:24339 7.5

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)

  • bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:24339
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:24367 7.5

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)

  • bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:24367
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:24368 7.5

Important: bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

  • bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)

  • bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:24368
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-5946 7.5

CVE-2026-5946 in rootio-bind9 - Patched by Root

Root has patched CVE-2026-5946 in the rootio-bind9 package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-5946
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-5946 7.5

Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet (IN) — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes (ANY or NONE) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (UPDATE), zone change notifications (NOTIFY), or processing of IN-specific record types in non-IN data — can cause assertion failures in named. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Record
UBUNTU-CVE-2026-5946
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2026:23360 No score

Important: bind9.16 security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)
  • bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:23360
Updated
2026-11-02
OSVALSA-2026:24338 No score

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)
  • bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:24338
Updated
2026-11-02
OSVALSA-2026:24339 No score

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)
  • bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:24339
Updated
2026-11-02
OSVALSA-2026:24367 No score

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)
  • bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:24367
Updated
2026-11-02
OSVALSA-2026:24368 No score

Important: bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

  • bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)
  • bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:24368
Updated
2026-11-02
OSVAZL-87096 No score

CVE-2026-5946 affecting package bind for versions less than 9.20.23-1

Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet (IN) — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes (ANY or NONE) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (UPDATE), zone change notifications (NOTIFY), or processing of IN-specific record types in non-IN data — can cause assertion failures in named. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Record
AZL-87096
Updated
2026-11-02
OSVCLSA-2026-1780068979 No score

Fix CVE(s): CVE-2026-5946

  • SECURITY UPDATE: multiple flaws in named related to handling of DNS messages whose CLASS is not Internet (IN)
    • debian/patches/CVE-2026-5946.patch: Restrict DNS operations to class IN only.
    • CVE-2026-5946
Record
CLSA-2026-1780068979
Updated
2026-11-02
OSVCLSA-2026-1780406874 No score

Fix CVE(s): CVE-2026-3039, CVE-2026-5946

  • SECURITY UPDATE: Multiple assertion failures in named when handling DNS messages with non-IN class (CHAOS, HESIOD) or meta-classes (ANY, NONE) in UPDATE, NOTIFY, and recursion paths
    • debian/patches/CVE-2026-5946.patch: disable recursion for non-IN views, reject UPDATE and NOTIFY for non-IN classes, validate DNS message CLASS early in request processing, reject NONE/ANY meta-classes in UPDATE and NOTIFY questions, and skip deny-answer-address for non-IN addresses in bin/named/server.c, lib/bind9/check.c, lib/dns/adb.c, lib/dns/message.c, lib/dns/resolver.c, lib/ns/client.c, lib/ns/update.c
    • CVE-2026-5946
Record
CLSA-2026-1780406874
Updated
2026-11-02
OSVCLSA-2026-1780413185 No score

bind: Fix of 3 CVEs

  • CVE-2026-3039: reject multi-round GSS-API TKEY negotiation and free leaked security contexts to prevent memory exhaustion
  • CVE-2026-5946: disable recursion, UPDATE, and NOTIFY for non-IN class views to prevent assertion-failure denial of service
Record
CLSA-2026-1780413185
Updated
2026-11-02
OSVCLSA-2026-1780476189 No score

Fix CVE(s): CVE-2026-5946

  • SECURITY UPDATE: restrict DNS operations (recursion, UPDATE, NOTIFY) to class IN only
    • debian/patches/CVE-2026-5946.patch: restrict DNS operations (recursion, UPDATE, NOTIFY) to class IN only
    • CVE-2026-5946
Record
CLSA-2026-1780476189
Updated
2026-11-02
OSVCLSA-2026-1780508058 No score

bind: Fix of CVE-2026-5946

  • CVE-2026-5946: fix non-IN class request handling - disable recursion, UPDATE, and NOTIFY for non-IN views; reject meta-classes ANY/NONE in UPDATE/NOTIFY; validate message CLASS early; skip deny-answer-address for non-IN
Record
CLSA-2026-1780508058
Updated
2026-11-02
OSVCLSA-2026-1780508914 No score

bind: Fix of 2 CVEs

  • CVE-2026-3039: fix GSS-API resource leak in TKEY negotiation that could cause memory exhaustion (DoS)
  • CVE-2026-5946: disable recursion, UPDATE and NOTIFY for non-IN classes and reject ANY/NONE meta-classes to prevent assertion-failure crashes (DoS)
Record
CLSA-2026-1780508914
Updated
2026-11-02
OSVCLSA-2026-1780969601 No score

bind: Fix of 2 CVEs

  • CVE-2026-3039: fix GSS-API resource leak in TKEY negotiation that could cause memory exhaustion (DoS)
  • CVE-2026-5946: disable recursion, UPDATE and NOTIFY for non-IN classes and reject ANY/NONE meta-classes to prevent assertion-failure crashes (DoS)
Record
CLSA-2026-1780969601
Updated
2026-11-02
OSVCLSA-2026-1780971959 No score

bind: Fix of 4 CVEs

  • CVE-2026-3039: fix GSS-API resource leak in TKEY negotiation that could cause memory exhaustion (DoS)
  • CVE-2026-5946: disable recursion, UPDATE and NOTIFY for non-IN classes and reject ANY/NONE meta-classes to prevent assertion-failure crashes (DoS)
Record
CLSA-2026-1780971959
Updated
2026-11-02
OSVCLSA-2026-1786004218 No score

bind: Fix of 4 CVEs

  • Re-tag base release to 26.0.7.P2 to align NVR with Oracle Linux errata; no code changes — this build already contains all fixes shipped in Oracle 26.0.7.P2 (CVE-2025-40778, CVE-2026-1519) plus CVE-2026-3039 and CVE-2026-5946
Record
CLSA-2026-1786004218
Updated
2026-11-02
OSVCLSA-2026-1790158621 No score

Fix CVE(s): CVE-2026-5946

  • SECURITY UPDATE: assertion failures in named when handling DNS messages whose CLASS is not IN or that use the meta-classes ANY or NONE
    • debian/patches/CVE-2026-5946-1.patch: force recursion off and set the allow-recursion ACLs to none for views with a class other than IN
    • debian/patches/CVE-2026-5946-2.patch: return NOTIMP for UPDATE and NOTIFY in non-IN views, check the class before treating WKS rdata as class IN, and assert that updated zones are class IN
    • debian/patches/CVE-2026-5946-3.patch: validate the message CLASS early, returning NOTIMP for unsupported classes and FORMERR for NONE outside UPDATE and ANY outside TKEY negotiation
    • debian/patches/CVE-2026-5946-4.patch: reject UPDATE and NOTIFY messages whose question class is ANY or NONE with FORMERR
    • debian/patches/CVE-2026-5946-5.patch: skip deny-answer-address matching for non-IN address records
    • CVE-2026-5946
Record
CLSA-2026-1790158621
Updated
2026-11-02
OSVMGASA-2026-0163 No score

Updated bind packages fix security vulnerabilities

Updated bind package fixes security vulnerabilities:

  • BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)
  • Amplification vulnerabilities via self-pointed glue records (CVE-2026-3592)
  • Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation (CVE-2026-3593)
  • Invalid handling of CLASS != IN (CVE-2026-5946)
  • SIG(0) validation during query flood may lead to undefined behavior (CVE-2026-5947) *Unbounded resend loop in BIND 9 resolver (CVE-2026-5950)
Record
MGASA-2026-0163
Updated
2026-11-02
OSVopenSUSE-SU-2026:10874-1 No score

bind-9.20.23-1.1 on GA media

These are all security issues fixed in the bind-9.20.23-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10874-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21123-1 No score

Security update for bind

This update for bind fixes the following issues

Upgrade to release 9.20.23:

  • CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591).
  • CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592).
  • CVE-2026-3593: Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation (bsc#1265593).
  • CVE-2026-5946: Invalid handling of CLASS != IN (bsc#1265594).
  • CVE-2026-5947: SIG(0) validation during query flood may lead to undefined behavior (bsc#1265595).
  • CVE-2026-5950: Unbounded resend loop in BIND 9 resolver (bsc#1265596).
Record
openSUSE-SU-2026:21123-1
Updated
2026-11-02
OSVSUSE-SU-2026:22198-1 No score

Security update for bind

This update for bind fixes the following issues

Upgrade to release 9.20.23:

  • CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591).
  • CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592).
  • CVE-2026-3593: Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation (bsc#1265593).
  • CVE-2026-5946: Invalid handling of CLASS != IN (bsc#1265594).
  • CVE-2026-5947: SIG(0) validation during query flood may lead to undefined behavior (bsc#1265595).
  • CVE-2026-5950: Unbounded resend loop in BIND 9 resolver (bsc#1265596).
Record
SUSE-SU-2026:22198-1
Updated
2026-11-02
OSVSUSE-SU-2026:2289-1 No score

Security update for bind

This update for bind fixes the following issues:

  • CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591).
  • CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592).
  • CVE-2026-5946: Invalid handling of CLASS != IN (bsc#1265594).
Record
SUSE-SU-2026:2289-1
Updated
2026-11-02
OSVSUSE-SU-2026:2616-1 No score

Security update for bind

This update for bind fixes the following issues:

  • CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592).
  • CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591).
  • CVE-2026-5946: Invalid handling of CLASS != IN (bsc#1265594).
Record
SUSE-SU-2026:2616-1
Updated
2026-11-02
OSVSUSE-SU-2026:2617-1 No score

Security update for bind

This update for bind fixes the following issues:

  • CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592).
  • CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591).
  • CVE-2026-5946: Invalid handling of CLASS != IN (bsc#1265594).
Record
SUSE-SU-2026:2617-1
Updated
2026-11-02
OSVSUSE-SU-2026:2673-1 No score

Security update for bind

This update for bind fixes the following issues:

Security issues:

  • CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591).
  • CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592).
  • CVE-2026-3593: Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation (bsc#1265593).
  • CVE-2026-5946: Invalid handling of CLASS != IN (bsc#1265594).
  • CVE-2026-5947: SIG(0) validation during query flood may lead to undefined behavior (bsc#1265595).
  • CVE-2026-5950: Unbounded resend loop in BIND 9 resolver (bsc#1265596).

Non security issue:

  • bind test failed with version 9.20.21 (bsc#1263494).
  • Upgrade to release 9.20.23
Record
SUSE-SU-2026:2673-1
Updated
2026-11-02
OSVSUSE-SU-2026:2676-1 No score

Security update for bind

This update for bind fixes the following issues

  • CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591).
  • CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592).
  • CVE-2026-5946: Invalid handling of CLASS != IN (bsc#1265594).
  • CVE-2026-5950: Unbounded resend loop in BIND 9 resolver (bsc#1265596).
  • CVE-2026-3593: Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation (bsc#1265593).

Changes for bind:

  • Update to release 9.18.49
Record
SUSE-SU-2026:2676-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bind
Alpine:v3.20
 9.11.0 up to 9.18.49-r0
9.18.49-r0
bind
Alpine:v3.21
 9.11.0 up to 9.18.49-r0
9.18.49-r0
bind
Alpine:v3.22
 9.11.0 up to 9.20.23-r0
9.20.23-r0
bind
Alpine:v3.23
 9.11.0 up to 9.20.23-r0
9.20.23-r0
bind
Alpine:v3.24
 9.11.0 up to 9.20.23-r0
9.20.23-r0
bind9.16
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-chroot
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-dnssec-utils
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-doc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
Show 290 moreShow less
Affected packages
PackageAffectedFixed
bind9.16-libs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-license
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-utils
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
python3-bind9.16
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind
AlmaLinux:10
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-chroot
AlmaLinux:10
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-devel
AlmaLinux:10
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-dnssec-utils
AlmaLinux:10
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-doc
AlmaLinux:10
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-libs
AlmaLinux:10
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-license
AlmaLinux:10
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-utils
AlmaLinux:10
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-chroot
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-export-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-export-libs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-libs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-libs-lite
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-license
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-lite-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-libs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-utils
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-sdb
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-sdb-chroot
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-utils
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
python3-bind
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-chroot
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-dnssec-doc
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-dnssec-utils
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-doc
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-libs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-license
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-utils
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
python3-bind
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind9.18
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.18.29-14.el9_8.2
32:9.18.29-14.el9_8.2
bind9.18-chroot
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.18.29-14.el9_8.2
32:9.18.29-14.el9_8.2
bind9.18-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.18.29-14.el9_8.2
32:9.18.29-14.el9_8.2
bind9.18-dnssec-utils
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.18.29-14.el9_8.2
32:9.18.29-14.el9_8.2
bind9.18-doc
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.18.29-14.el9_8.2
32:9.18.29-14.el9_8.2
bind9.18-libs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.18.29-14.el9_8.2
32:9.18.29-14.el9_8.2
bind9.18-utils
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.18.29-14.el9_8.2
32:9.18.29-14.el9_8.2
bind
Azure Linux:3
 before 9.20.23-1
9.20.23-1
bind
Alpaquita:23
 9.18.11-r0 up to 9.18.49-r0
9.18.49-r0
bind
Alpaquita:25
 9.20.9-r0 up to 9.20.23-r0
9.20.23-r0
bind
Alpaquita:stream
 9.18.16-r0 up to 9.20.23-r0
9.20.23-r0
bind9
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
bind9-doc
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
bind9-host
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
bind9utils
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
dnsutils
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
libbind-dev
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
libbind-export-dev
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
libbind9-160
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
libdns-export1100
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
libdns1100
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
libirs-export160
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
libirs160
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
libisc-export169
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
libisc169
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
libisccc-export160
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
libisccc160
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
libisccfg-export160
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
libisccfg160
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
liblwres160
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els8
bind9
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
bind9-dnsutils
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
bind9-doc
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
bind9-host
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
bind9-libs
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
bind9-utils
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
bind9utils
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
dnsutils
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
bind
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-chroot
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-devel
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-export-devel
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-export-libs
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-libs
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-libs-lite
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-license
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-lite-devel
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-pkcs11
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-pkcs11-devel
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-pkcs11-libs
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-pkcs11-utils
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-sdb
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-sdb-chroot
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-utils
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind9
TuxCare:Debian:10
 before 1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
bind9-doc
TuxCare:Debian:10
 before 1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
bind9-host
TuxCare:Debian:10
 before 1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
bind9utils
TuxCare:Debian:10
 before 1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
dnsutils
TuxCare:Debian:10
 before 1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
libbind-dev
TuxCare:Debian:10
 before 1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
libbind-export-dev
TuxCare:Debian:10
 before 1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
libbind9-161
TuxCare:Debian:10
 before 1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
libdns-export1104
TuxCare:Debian:10
 before 1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
libdns1104
TuxCare:Debian:10
 before 1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
libirs-export161
TuxCare:Debian:10
 before 1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
libirs161
TuxCare:Debian:10
 before 1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
libisc-export1100
TuxCare:Debian:10
 before 1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
libisc1100
TuxCare:Debian:10
 before 1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
libisccc-export161
TuxCare:Debian:10
 before 1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
libisccc161
TuxCare:Debian:10
 before 1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
libisccfg-export163
TuxCare:Debian:10
 before 1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
libisccfg163
TuxCare:Debian:10
 before 1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
liblwres161
TuxCare:Debian:10
 before 1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els2
bind
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els11
32:9.16.23-11.el9_2.2.tuxcare.els11
bind-chroot
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els11
32:9.16.23-11.el9_2.2.tuxcare.els11
bind-devel
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els11
32:9.16.23-11.el9_2.2.tuxcare.els11
bind-dnssec-doc
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els11
32:9.16.23-11.el9_2.2.tuxcare.els11
bind-dnssec-utils
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els11
32:9.16.23-11.el9_2.2.tuxcare.els11
bind-doc
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els11
32:9.16.23-11.el9_2.2.tuxcare.els11
bind-libs
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els11
32:9.16.23-11.el9_2.2.tuxcare.els11
bind-license
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els11
32:9.16.23-11.el9_2.2.tuxcare.els11
bind-utils
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els11
32:9.16.23-11.el9_2.2.tuxcare.els11
python3-bind
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els11
32:9.16.23-11.el9_2.2.tuxcare.els11
bind
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-chroot
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-devel
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-export-devel
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-export-libs
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-libs
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-libs-lite
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-license
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-lite-devel
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-pkcs11
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-pkcs11-devel
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-pkcs11-libs
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-pkcs11-utils
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-sdb
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-sdb-chroot
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-utils
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
python3-bind
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els13
33:9.11.4-26.P2.el7_9.16.tuxcare.els13
bind-chroot
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els13
33:9.11.4-26.P2.el7_9.16.tuxcare.els13
bind-devel
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els13
33:9.11.4-26.P2.el7_9.16.tuxcare.els13
bind-export-devel
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els13
33:9.11.4-26.P2.el7_9.16.tuxcare.els13
bind-export-libs
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els13
33:9.11.4-26.P2.el7_9.16.tuxcare.els13
bind-libs
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els13
33:9.11.4-26.P2.el7_9.16.tuxcare.els13
bind-libs-lite
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els13
33:9.11.4-26.P2.el7_9.16.tuxcare.els13
bind-license
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els13
33:9.11.4-26.P2.el7_9.16.tuxcare.els13
bind9
Debian:12
 before 1:9.18.49-1~deb12u2, plus listed versions
1:9.18.12-11:9.18.13-11:9.18.16-11:9.18.16-1~deb12u11:9.18.16-1~deb12u1~bpo11+1
Show 11 moreShow less
1:9.18.19-1~deb12u11:9.18.19-1~deb12u1~bpo11+11:9.18.24-11:9.18.24-1~bpo11+11:9.18.28-1~deb12u11:9.18.28-1~deb12u21:9.18.33-1~deb12u21:9.18.41-1~deb12u11:9.18.44-1~deb12u11:9.18.47-1~deb12u11:9.18.49-1~deb12u1
1:9.18.49-1~deb12u2
bind9
Debian:13
 before 1:9.20.23-1~deb13u1, plus listed versions
1:9.20.11-41:9.20.15-11:9.20.15-1~deb13u11:9.20.15-1~deb13u1~bpo12+11:9.20.15-2
Show 12 moreShow less
1:9.20.18-11:9.20.18-1~deb13u11:9.20.18-1~deb13u1~bpo12+11:9.20.19-11:9.20.19-1~bpo12+11:9.20.20-11:9.20.20-1~bpo12+11:9.20.21-11:9.20.21-1~deb13u11:9.20.21-1~deb13u1~bpo12+11:9.20.22-11:9.20.23-1~deb13u1~bpo12+1
1:9.20.23-1~deb13u1
bind9
Debian:14
 before 1:9.20.23-1, plus listed versions
1:9.20.11-41:9.20.15-11:9.20.15-1~deb13u11:9.20.15-1~deb13u1~bpo12+11:9.20.15-2
Show 13 moreShow less
1:9.20.18-11:9.20.18-1~deb13u11:9.20.18-1~deb13u1~bpo12+11:9.20.19-11:9.20.19-1~bpo12+11:9.20.20-11:9.20.20-1~bpo12+11:9.20.21-11:9.20.21-1~deb13u11:9.20.21-1~deb13u1~bpo12+11:9.20.22-11:9.20.23-1~deb13u11:9.20.23-1~deb13u1~bpo12+1
1:9.20.23-1
bind
Mageia:9
From an advisory covering 6 CVEs
 before 9.18.49-1.mga9
9.18.49-1.mga9
bind
openEuler:24.03-LTS-SP3
From an advisory covering 3 CVEs
 before 9.18.21-9.oe2403sp3
9.18.21-9.oe2403sp3
bind
openEuler:24.03-LTS-SP1
From an advisory covering 3 CVEs
 before 9.18.21-8.oe2403sp1
9.18.21-8.oe2403sp1
bind
openEuler:20.03-LTS-SP4
From an advisory covering 3 CVEs
 before 9.11.21-24.oe2003sp4
9.11.21-24.oe2003sp4
bind
openEuler:22.03-LTS-SP4
From an advisory covering 3 CVEs
 before 9.16.23-30.oe2203sp4
9.16.23-30.oe2203sp4
bind
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:9.18.49-1.hum1
0:9.18.49-1.hum1
bind-chroot
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:9.18.49-1.hum1
0:9.18.49-1.hum1
bind-devel
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:9.18.49-1.hum1
0:9.18.49-1.hum1
bind-dnssec-utils
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:9.18.49-1.hum1
0:9.18.49-1.hum1
bind-doc
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:9.18.49-1.hum1
0:9.18.49-1.hum1
bind-libs
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:9.18.49-1.hum1
0:9.18.49-1.hum1
bind-utils
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:9.18.49-1.hum1
0:9.18.49-1.hum1
bind9.16
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-chroot
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-dnssec-utils
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-dnssec-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-license
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-utils
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
python3-bind9.16
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-debugsource
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-dnssec-utils-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-doc
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-libs
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-libs-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-utils-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-chroot
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-dnssec-utils
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-dnssec-utils-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-libs
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-libs-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-license
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-utils
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-utils-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-doc
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-chroot
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-export-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-libs-lite
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-libs-lite-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-license
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-lite-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-utils
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-sdb
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-sdb-chroot
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-sdb-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-utils
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
python3-bind
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-debugsource
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-export-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-export-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-export-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-libs-lite-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-utils-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-sdb-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-utils-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-chroot
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-dnssec-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-dnssec-utils
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-dnssec-utils-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-libs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-license
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-utils
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-utils-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
python3-bind
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-dnssec-utils-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-doc
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind9.16
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:9.16.23-0.22.el8_10.6
2:9.16.23-0.22.el8_10.6
bind
Rocky Linux:10
From an advisory covering 2 CVEs
 before 2:9.18.33-15.el10_2.2
2:9.18.33-15.el10_2.2
bind
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:9.11.36-16.el8_10.8
2:9.11.36-16.el8_10.8
bind
Rocky Linux:9
From an advisory covering 2 CVEs
 before 2:9.16.23-40.el9_8.2
2:9.16.23-40.el9_8.2
bind9.18
Rocky Linux:9
From an advisory covering 2 CVEs
 before 2:9.18.29-14.el9_8.2
2:9.18.29-14.el9_8.2
bind
SUSE:Linux Enterprise Server 16.0
From an advisory covering 6 CVEs
 before 9.20.23-160000.1.1
9.20.23-160000.1.1
bind
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 6 CVEs
 before 9.20.23-160000.1.1
9.20.23-160000.1.1
bind
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 3 CVEs
 before 9.16.50-150500.8.38.1
9.16.50-150500.8.38.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 3 CVEs
 before 9.16.50-150500.8.38.1
9.16.50-150500.8.38.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 9.16.50-150500.8.38.1
9.16.50-150500.8.38.1
bind
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 9.16.50-150500.8.38.1
9.16.50-150500.8.38.1
bind
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 3 CVEs
 before 9.16.50-150500.8.38.1
9.16.50-150500.8.38.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 3 CVEs
 before 9.16.50-150400.5.62.1
9.16.50-150400.5.62.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 9.16.50-150400.5.62.1
9.16.50-150400.5.62.1
bind
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 9.16.50-150400.5.62.1
9.16.50-150400.5.62.1
bind
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 3 CVEs
 before 9.16.50-150400.5.62.1
9.16.50-150400.5.62.1
bind
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 6 CVEs
 before 9.20.23-150700.3.25.1
9.20.23-150700.3.25.1
bind
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 6 CVEs
 before 9.20.23-150700.3.25.1
9.20.23-150700.3.25.1
bind
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 5 CVEs
 before 9.18.49-150600.3.26.1
9.18.49-150600.3.26.1
bind
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 5 CVEs
 before 9.18.49-150600.3.26.1
9.18.49-150600.3.26.1
bind
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 3 CVEs
 before 9.16.6-150300.22.59.1
9.16.6-150300.22.59.1
bind
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 3 CVEs
 before 9.16.6-150300.22.59.1
9.16.6-150300.22.59.1
bind
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 3 CVEs
 before 9.16.6-150300.22.59.1
9.16.6-150300.22.59.1
bind
SUSE:Multi Linux Manager Tools SLE-Micro-5
From an advisory covering 10 CVEs
 before 9.16.6-150000.12.91.1
9.16.6-150000.12.91.1
bind
SUSE:Manager Client Tools for SLE Micro 5
From an advisory covering 10 CVEs
 before 9.16.6-150000.12.91.1
9.16.6-150000.12.91.1
bind9
Ubuntu:Pro:18.04:LTS
 before 1:9.11.3+dfsg-1ubuntu1.19+esm5, plus listed versions
1:9.10.3.dfsg.P4-12.6ubuntu11:9.11.2.P1-1ubuntu21:9.11.2.P1-1ubuntu31:9.11.2.P1-1ubuntu41:9.11.2.P1-1ubuntu5
Show 21 moreShow less
1:9.11.3+dfsg-1ubuntu11:9.11.3+dfsg-1ubuntu1.11:9.11.3+dfsg-1ubuntu1.21:9.11.3+dfsg-1ubuntu1.31:9.11.3+dfsg-1ubuntu1.51:9.11.3+dfsg-1ubuntu1.71:9.11.3+dfsg-1ubuntu1.81:9.11.3+dfsg-1ubuntu1.91:9.11.3+dfsg-1ubuntu1.101:9.11.3+dfsg-1ubuntu1.111:9.11.3+dfsg-1ubuntu1.121:9.11.3+dfsg-1ubuntu1.131:9.11.3+dfsg-1ubuntu1.141:9.11.3+dfsg-1ubuntu1.151:9.11.3+dfsg-1ubuntu1.161:9.11.3+dfsg-1ubuntu1.171:9.11.3+dfsg-1ubuntu1.181:9.11.3+dfsg-1ubuntu1.19+esm11:9.11.3+dfsg-1ubuntu1.19+esm21:9.11.3+dfsg-1ubuntu1.19+esm31:9.11.3+dfsg-1ubuntu1.19+esm4
1:9.11.3+dfsg-1ubuntu1.19+esm5
bind9
Ubuntu:Pro:20.04:LTS
 before 1:9.18.30-0ubuntu0.20.04.2+esm2, plus listed versions
1:9.11.5.P4+dfsg-5.1ubuntu21:9.11.5.P4+dfsg-5.1ubuntu31:9.11.5.P4+dfsg-5.1ubuntu41:9.11.5.P4+dfsg-5.1ubuntu51:9.11.14+dfsg-1ubuntu1
Show 25 moreShow less
1:9.11.14+dfsg-3ubuntu11:9.16.0-1ubuntu31:9.16.0-1ubuntu41:9.16.0-1ubuntu51:9.16.1-0ubuntu11:9.16.1-0ubuntu21:9.16.1-0ubuntu2.11:9.16.1-0ubuntu2.21:9.16.1-0ubuntu2.31:9.16.1-0ubuntu2.41:9.16.1-0ubuntu2.61:9.16.1-0ubuntu2.71:9.16.1-0ubuntu2.81:9.16.1-0ubuntu2.91:9.16.1-0ubuntu2.101:9.16.1-0ubuntu2.111:9.16.1-0ubuntu2.121:9.16.1-0ubuntu2.141:9.16.1-0ubuntu2.151:9.16.1-0ubuntu2.161:9.16.48-0ubuntu0.20.04.11:9.18.28-0ubuntu0.20.04.11:9.18.30-0ubuntu0.20.04.11:9.18.30-0ubuntu0.20.04.21:9.18.30-0ubuntu0.20.04.2+esm1
1:9.18.30-0ubuntu0.20.04.2+esm2
bind9-libs
Ubuntu:20.04:LTS
 All versions, plus listed versions
1:9.11.16+dfsg-3~build11:9.11.16+dfsg-3~ubuntu1
 None known
bind9
Ubuntu:22.04:LTS
 before 1:9.18.39-0ubuntu0.22.04.4, plus listed versions
1:9.16.15-1ubuntu11:9.16.15-1ubuntu21:9.16.15-1ubuntu31:9.18.0-2ubuntu11:9.18.0-2ubuntu2
Show 17 moreShow less
1:9.18.0-2ubuntu31:9.18.1-1ubuntu11:9.18.1-1ubuntu1.11:9.18.1-1ubuntu1.21:9.18.1-1ubuntu1.31:9.18.12-0ubuntu0.22.04.11:9.18.12-0ubuntu0.22.04.21:9.18.12-0ubuntu0.22.04.31:9.18.18-0ubuntu0.22.04.11:9.18.18-0ubuntu0.22.04.21:9.18.24-0ubuntu0.22.04.11:9.18.28-0ubuntu0.22.04.11:9.18.30-0ubuntu0.22.04.11:9.18.30-0ubuntu0.22.04.21:9.18.39-0ubuntu0.22.04.11:9.18.39-0ubuntu0.22.04.21:9.18.39-0ubuntu0.22.04.3
1:9.18.39-0ubuntu0.22.04.4
bind9-libs
Ubuntu:22.04:LTS
 All versions, plus listed versions
1:9.11.19+dfsg-2.1ubuntu11:9.11.19+dfsg-2.1ubuntu21:9.11.19+dfsg-2.1ubuntu3
 None known
bind9
Ubuntu:24.04:LTS
 before 1:9.18.39-0ubuntu0.24.04.5, plus listed versions
1:9.18.18-0ubuntu21:9.18.21-0ubuntu11:9.18.24-0ubuntu31:9.18.24-0ubuntu41:9.18.24-0ubuntu5
Show 6 moreShow less
1:9.18.28-0ubuntu0.24.04.11:9.18.30-0ubuntu0.24.04.11:9.18.30-0ubuntu0.24.04.21:9.18.39-0ubuntu0.24.04.11:9.18.39-0ubuntu0.24.04.21:9.18.39-0ubuntu0.24.04.3
1:9.18.39-0ubuntu0.24.04.5
bind9
Ubuntu:25.10
 before 1:9.20.11-1ubuntu2.4, plus listed versions
1:9.20.4-3ubuntu11:9.20.4-3ubuntu21:9.20.4-3ubuntu31:9.20.9-2ubuntu11:9.20.10-1ubuntu1
Show 4 moreShow less
1:9.20.11-1ubuntu11:9.20.11-1ubuntu21:9.20.11-1ubuntu2.11:9.20.11-1ubuntu2.2
1:9.20.11-1ubuntu2.4
bind9
Ubuntu:26.04:LTS
 before 1:9.20.18-1ubuntu2.1, plus listed versions
1:9.20.11-1ubuntu21:9.20.11-1ubuntu31:9.20.18-1ubuntu11:9.20.18-1ubuntu2
1:9.20.18-1ubuntu2.1
bind9
Ubuntu:Pro:14.04:LTS
From an advisory covering 3 CVEs
 before 1:9.9.5.dfsg-3ubuntu0.19+esm14, plus listed versions
1:9.9.3.dfsg.P2-4ubuntu11:9.9.3.dfsg.P2-4ubuntu21:9.9.3.dfsg.P2-4ubuntu31:9.9.5.dfsg-21:9.9.5.dfsg-3
Show 31 moreShow less
1:9.9.5.dfsg-3ubuntu0.11:9.9.5.dfsg-3ubuntu0.21:9.9.5.dfsg-3ubuntu0.31:9.9.5.dfsg-3ubuntu0.41:9.9.5.dfsg-3ubuntu0.51:9.9.5.dfsg-3ubuntu0.61:9.9.5.dfsg-3ubuntu0.71:9.9.5.dfsg-3ubuntu0.81:9.9.5.dfsg-3ubuntu0.91:9.9.5.dfsg-3ubuntu0.101:9.9.5.dfsg-3ubuntu0.111:9.9.5.dfsg-3ubuntu0.121:9.9.5.dfsg-3ubuntu0.131:9.9.5.dfsg-3ubuntu0.141:9.9.5.dfsg-3ubuntu0.151:9.9.5.dfsg-3ubuntu0.161:9.9.5.dfsg-3ubuntu0.171:9.9.5.dfsg-3ubuntu0.181:9.9.5.dfsg-3ubuntu0.191:9.9.5.dfsg-3ubuntu0.19+esm11:9.9.5.dfsg-3ubuntu0.19+esm21:9.9.5.dfsg-3ubuntu0.19+esm31:9.9.5.dfsg-3ubuntu0.19+esm41:9.9.5.dfsg-3ubuntu0.19+esm51:9.9.5.dfsg-3ubuntu0.19+esm61:9.9.5.dfsg-3ubuntu0.19+esm71:9.9.5.dfsg-3ubuntu0.19+esm91:9.9.5.dfsg-3ubuntu0.19+esm101:9.9.5.dfsg-3ubuntu0.19+esm111:9.9.5.dfsg-3ubuntu0.19+esm121:9.9.5.dfsg-3ubuntu0.19+esm13
1:9.9.5.dfsg-3ubuntu0.19+esm14
bind9
Ubuntu:Pro:16.04:LTS
From an advisory covering 3 CVEs
 before 1:9.10.3.dfsg.P4-8ubuntu1.19+esm10, plus listed versions
1:9.9.5.dfsg-11ubuntu11:9.9.5.dfsg-121:9.9.5.dfsg-12.11:9.9.5.dfsg-12.1ubuntu11:9.10.3.dfsg.P2-4
Show 32 moreShow less
1:9.10.3.dfsg.P2-51:9.10.3.dfsg.P4-31:9.10.3.dfsg.P4-41:9.10.3.dfsg.P4-51:9.10.3.dfsg.P4-81:9.10.3.dfsg.P4-8ubuntu11:9.10.3.dfsg.P4-8ubuntu1.11:9.10.3.dfsg.P4-8ubuntu1.21:9.10.3.dfsg.P4-8ubuntu1.31:9.10.3.dfsg.P4-8ubuntu1.41:9.10.3.dfsg.P4-8ubuntu1.51:9.10.3.dfsg.P4-8ubuntu1.61:9.10.3.dfsg.P4-8ubuntu1.71:9.10.3.dfsg.P4-8ubuntu1.81:9.10.3.dfsg.P4-8ubuntu1.91:9.10.3.dfsg.P4-8ubuntu1.101:9.10.3.dfsg.P4-8ubuntu1.111:9.10.3.dfsg.P4-8ubuntu1.121:9.10.3.dfsg.P4-8ubuntu1.141:9.10.3.dfsg.P4-8ubuntu1.151:9.10.3.dfsg.P4-8ubuntu1.161:9.10.3.dfsg.P4-8ubuntu1.171:9.10.3.dfsg.P4-8ubuntu1.181:9.10.3.dfsg.P4-8ubuntu1.191:9.10.3.dfsg.P4-8ubuntu1.19+esm11:9.10.3.dfsg.P4-8ubuntu1.19+esm21:9.10.3.dfsg.P4-8ubuntu1.19+esm31:9.10.3.dfsg.P4-8ubuntu1.19+esm51:9.10.3.dfsg.P4-8ubuntu1.19+esm61:9.10.3.dfsg.P4-8ubuntu1.19+esm71:9.10.3.dfsg.P4-8ubuntu1.19+esm81:9.10.3.dfsg.P4-8ubuntu1.19+esm9
1:9.10.3.dfsg.P4-8ubuntu1.19+esm10
bind9
Ubuntu:Pro:18.04:LTS
From an advisory covering 3 CVEs
 before 1:9.11.3+dfsg-1ubuntu1.19+esm5, plus listed versions
1:9.10.3.dfsg.P4-12.6ubuntu11:9.11.2.P1-1ubuntu21:9.11.2.P1-1ubuntu31:9.11.2.P1-1ubuntu41:9.11.2.P1-1ubuntu5
Show 21 moreShow less
1:9.11.3+dfsg-1ubuntu11:9.11.3+dfsg-1ubuntu1.11:9.11.3+dfsg-1ubuntu1.21:9.11.3+dfsg-1ubuntu1.31:9.11.3+dfsg-1ubuntu1.51:9.11.3+dfsg-1ubuntu1.71:9.11.3+dfsg-1ubuntu1.81:9.11.3+dfsg-1ubuntu1.91:9.11.3+dfsg-1ubuntu1.101:9.11.3+dfsg-1ubuntu1.111:9.11.3+dfsg-1ubuntu1.121:9.11.3+dfsg-1ubuntu1.131:9.11.3+dfsg-1ubuntu1.141:9.11.3+dfsg-1ubuntu1.151:9.11.3+dfsg-1ubuntu1.161:9.11.3+dfsg-1ubuntu1.171:9.11.3+dfsg-1ubuntu1.181:9.11.3+dfsg-1ubuntu1.19+esm11:9.11.3+dfsg-1ubuntu1.19+esm21:9.11.3+dfsg-1ubuntu1.19+esm31:9.11.3+dfsg-1ubuntu1.19+esm4
1:9.11.3+dfsg-1ubuntu1.19+esm5
bind9
Ubuntu:Pro:20.04:LTS
From an advisory covering 3 CVEs
 before 1:9.18.30-0ubuntu0.20.04.2+esm2, plus listed versions
1:9.11.5.P4+dfsg-5.1ubuntu21:9.11.5.P4+dfsg-5.1ubuntu31:9.11.5.P4+dfsg-5.1ubuntu41:9.11.5.P4+dfsg-5.1ubuntu51:9.11.14+dfsg-1ubuntu1
Show 25 moreShow less
1:9.11.14+dfsg-3ubuntu11:9.16.0-1ubuntu31:9.16.0-1ubuntu41:9.16.0-1ubuntu51:9.16.1-0ubuntu11:9.16.1-0ubuntu21:9.16.1-0ubuntu2.11:9.16.1-0ubuntu2.21:9.16.1-0ubuntu2.31:9.16.1-0ubuntu2.41:9.16.1-0ubuntu2.61:9.16.1-0ubuntu2.71:9.16.1-0ubuntu2.81:9.16.1-0ubuntu2.91:9.16.1-0ubuntu2.101:9.16.1-0ubuntu2.111:9.16.1-0ubuntu2.121:9.16.1-0ubuntu2.141:9.16.1-0ubuntu2.151:9.16.1-0ubuntu2.161:9.16.48-0ubuntu0.20.04.11:9.18.28-0ubuntu0.20.04.11:9.18.30-0ubuntu0.20.04.11:9.18.30-0ubuntu0.20.04.21:9.18.30-0ubuntu0.20.04.2+esm1
1:9.18.30-0ubuntu0.20.04.2+esm2
bind
openSUSE:Tumbleweed
From an advisory covering 5 CVEs
 before 9.20.23-1.1
9.20.23-1.1
bind
openSUSE:Leap 16.0
From an advisory covering 6 CVEs
 before 9.20.23-160000.1.1
9.20.23-160000.1.1

History

History
RecordedChangedSources
affected, facts
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-5946 is a high vulnerability (CVSS 7.5) in Isc Bind, published May 20, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.94%, the 80th percentile. Fixed in bind 9.18.49-r0.

References

Show 139 moreShow less
This page doesn't list everything

Left out here: 113 package rows. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 3 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open