Every CVE Search/ Get API key

CVE-2026-3039

BIND 9 server memory exhaustion during GSS-API TKEY negotiation

7.5 HighFix available

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.09%Up 1.0 points since May 21, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.5

BIND 9 server memory exhaustion during GSS-API TKEY negotiation

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Record
CVE-2026-3039
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-771, CWE-770
Updated
2026-11-02
EUVDEUVD-2026-31103 7.5

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Record
EUVD-2026-31103
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-p65f-mhrm-vhrc 7.5

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are...

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Record
GHSA-p65f-mhrm-vhrc
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770, CWE-771
Updated
2026-11-02
NVD 7.5

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Record
CVE-2026-3039
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-771, CWE-770
Updated
2026-11-02
OSVALPINE-CVE-2026-3039 7.5

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Record
ALPINE-CVE-2026-3039
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2026-3039 7.5
Record
BELL-CVE-2026-3039
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 48 moreShow less
OSV 7.5

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Record
CVE-2026-3039
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2026-3039 7.5

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Record
DEBIAN-CVE-2026-3039
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2600 7.5

bind security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-3039)

BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resources. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-3592)

Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet (IN) — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes (ANY or NONE) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (UPDATE), zone change notifications (NOTIFY), or processing of IN-specific record types in non-IN data — can cause assertion failures in named. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-5946)

Record
OESA-2026-2600
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2601 7.5

bind security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-3039)

BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resources. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-3592)

Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet (IN) — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes (ANY or NONE) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (UPDATE), zone change notifications (NOTIFY), or processing of IN-specific record types in non-IN data — can cause assertion failures in named. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-5946)

Record
OESA-2026-2601
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2655 7.5

bind security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-3039)

BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resources. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-3592)

Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet (IN) — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes (ANY or NONE) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (UPDATE), zone change notifications (NOTIFY), or processing of IN-specific record types in non-IN data — can cause assertion failures in named. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-5946)

Record
OESA-2026-2655
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2656 7.5

bind security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-3039)

BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resources. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-3592)

Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet (IN) — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes (ANY or NONE) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (UPDATE), zone change notifications (NOTIFY), or processing of IN-specific record types in non-IN data — can cause assertion failures in named. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.(CVE-2026-5946)

Record
OESA-2026-2656
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:20334 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:20334
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:23360 7.5

Red Hat Security Advisory: bind9.16 security update

Record
RHSA-2026:23360
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:24338 7.5

Red Hat Security Advisory: bind security update

Record
RHSA-2026:24338
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:24339 7.5

Red Hat Security Advisory: bind security update

Record
RHSA-2026:24339
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:24367 7.5

Red Hat Security Advisory: bind security update

Record
RHSA-2026:24367
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:24368 7.5

Red Hat Security Advisory: bind9.18 security update

Record
RHSA-2026:24368
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:55441 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2026:55441
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:57189 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2026:57189
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:60383 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2026:60383
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:79160 8.6

Red Hat Security Advisory: bind9.16 security, bug fix, and enhancement update

Record
RHSA-2026:79160
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:80501 8.6

Red Hat Security Advisory: bind9.16 security, bug fix, and enhancement update

Record
RHSA-2026:80501
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:23360 7.5

Important: bind9.16 security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)

  • bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:23360
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:24338 7.5

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)

  • bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:24338
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:24339 7.5

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)

  • bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:24339
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:24367 7.5

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)

  • bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:24367
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:24368 7.5

Important: bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

  • bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)

  • bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:24368
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-3039 7.5

CVE-2026-3039 in rootio-bind9 - Patched by Root

Root has patched CVE-2026-3039 in the rootio-bind9 package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-3039
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-3039 7.5

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Record
UBUNTU-CVE-2026-3039
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2026:23360 No score

Important: bind9.16 security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)
  • bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:23360
Updated
2026-11-02
OSVALSA-2026:24338 No score

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)
  • bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:24338
Updated
2026-11-02
OSVALSA-2026:24339 No score

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)
  • bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:24339
Updated
2026-11-02
OSVALSA-2026:24367 No score

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)
  • bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:24367
Updated
2026-11-02
OSVALSA-2026:24368 No score

Important: bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

  • bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)
  • bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:24368
Updated
2026-11-02
OSVAZL-87087 No score

CVE-2026-3039 affecting package bind for versions less than 9.20.23-1

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Record
AZL-87087
Updated
2026-11-02
OSVCLSA-2026-1780054328 No score

Fix CVE(s): CVE-2026-3039

  • SECURITY UPDATE: GSS-API resource leak triggered by multi-round TKEY
    • debian/patches/CVE-2026-3039.patch: reject GSS_S_CONTINUE_NEEDED in dst_gssapi_acceptctx() and release the partial security context and gouttoken so they don't accumulate per malicious TKEY query.
    • CVE-2026-3039
Record
CLSA-2026-1780054328
Updated
2026-11-02
OSVCLSA-2026-1780054583 No score

Fix CVE(s): CVE-2026-3039

  • SECURITY UPDATE: GSS-API resource leak triggered by multi-round TKEY
    • debian/patches/CVE-2026-3039.patch: reject GSS_S_CONTINUE_NEEDED in dst_gssapi_acceptctx() and release the partial security context and gouttoken so they don't accumulate per malicious TKEY query.
    • CVE-2026-3039
Record
CLSA-2026-1780054583
Updated
2026-11-02
OSVCLSA-2026-1780406874 No score

Fix CVE(s): CVE-2026-3039, CVE-2026-5946

  • SECURITY UPDATE: Multiple assertion failures in named when handling DNS messages with non-IN class (CHAOS, HESIOD) or meta-classes (ANY, NONE) in UPDATE, NOTIFY, and recursion paths
    • debian/patches/CVE-2026-5946.patch: disable recursion for non-IN views, reject UPDATE and NOTIFY for non-IN classes, validate DNS message CLASS early in request processing, reject NONE/ANY meta-classes in UPDATE and NOTIFY questions, and skip deny-answer-address for non-IN addresses in bin/named/server.c, lib/bind9/check.c, lib/dns/adb.c, lib/dns/message.c, lib/dns/resolver.c, lib/ns/client.c, lib/ns/update.c
    • CVE-2026-5946
Record
CLSA-2026-1780406874
Updated
2026-11-02
OSVCLSA-2026-1780407449 No score

bind: Fix of CVE-2026-3039

  • CVE-2026-3039: fix GSS-API memory exhaustion during TKEY negotiation
Record
CLSA-2026-1780407449
Updated
2026-11-02
OSVCLSA-2026-1780413185 No score

bind: Fix of 3 CVEs

  • CVE-2026-3039: reject multi-round GSS-API TKEY negotiation and free leaked security contexts to prevent memory exhaustion
  • CVE-2026-5946: disable recursion, UPDATE, and NOTIFY for non-IN class views to prevent assertion-failure denial of service
Record
CLSA-2026-1780413185
Updated
2026-11-02
OSVCLSA-2026-1780508914 No score

bind: Fix of 2 CVEs

  • CVE-2026-3039: fix GSS-API resource leak in TKEY negotiation that could cause memory exhaustion (DoS)
  • CVE-2026-5946: disable recursion, UPDATE and NOTIFY for non-IN classes and reject ANY/NONE meta-classes to prevent assertion-failure crashes (DoS)
Record
CLSA-2026-1780508914
Updated
2026-11-02
OSVCLSA-2026-1780969601 No score

bind: Fix of 2 CVEs

  • CVE-2026-3039: fix GSS-API resource leak in TKEY negotiation that could cause memory exhaustion (DoS)
  • CVE-2026-5946: disable recursion, UPDATE and NOTIFY for non-IN classes and reject ANY/NONE meta-classes to prevent assertion-failure crashes (DoS)
Record
CLSA-2026-1780969601
Updated
2026-11-02
OSVCLSA-2026-1780971959 No score

bind: Fix of 4 CVEs

  • CVE-2026-3039: fix GSS-API resource leak in TKEY negotiation that could cause memory exhaustion (DoS)
  • CVE-2026-5946: disable recursion, UPDATE and NOTIFY for non-IN classes and reject ANY/NONE meta-classes to prevent assertion-failure crashes (DoS)
Record
CLSA-2026-1780971959
Updated
2026-11-02
OSVCLSA-2026-1781168947 No score

Fix CVE(s): CVE-2026-3039

  • SECURITY UPDATE: named configured for TKEY GSS-API authentication could be driven to excessive memory consumption via crafted TKEY queries (GSS-API context leak on incomplete negotiation)
    • debian/patches/CVE-2026-3039.patch: named configured for TKEY GSS-API authentication could be driven to excessive memory consumption via crafted TKEY queries (GSS-API context leak on incomplete negotiation)
    • CVE-2026-3039
Record
CLSA-2026-1781168947
Updated
2026-11-02
OSVCLSA-2026-1786004218 No score

bind: Fix of 4 CVEs

  • Re-tag base release to 26.0.7.P2 to align NVR with Oracle Linux errata; no code changes — this build already contains all fixes shipped in Oracle 26.0.7.P2 (CVE-2025-40778, CVE-2026-1519) plus CVE-2026-3039 and CVE-2026-5946
Record
CLSA-2026-1786004218
Updated
2026-11-02
OSVMGASA-2026-0163 No score

Updated bind packages fix security vulnerabilities

Updated bind package fixes security vulnerabilities:

  • BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)
  • Amplification vulnerabilities via self-pointed glue records (CVE-2026-3592)
  • Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation (CVE-2026-3593)
  • Invalid handling of CLASS != IN (CVE-2026-5946)
  • SIG(0) validation during query flood may lead to undefined behavior (CVE-2026-5947) *Unbounded resend loop in BIND 9 resolver (CVE-2026-5950)
Record
MGASA-2026-0163
Updated
2026-11-02
OSVopenSUSE-SU-2026:10874-1 No score

bind-9.20.23-1.1 on GA media

These are all security issues fixed in the bind-9.20.23-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10874-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21123-1 No score

Security update for bind

This update for bind fixes the following issues

Upgrade to release 9.20.23:

  • CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591).
  • CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592).
  • CVE-2026-3593: Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation (bsc#1265593).
  • CVE-2026-5946: Invalid handling of CLASS != IN (bsc#1265594).
  • CVE-2026-5947: SIG(0) validation during query flood may lead to undefined behavior (bsc#1265595).
  • CVE-2026-5950: Unbounded resend loop in BIND 9 resolver (bsc#1265596).
Record
openSUSE-SU-2026:21123-1
Updated
2026-11-02
OSVSUSE-SU-2026:22198-1 No score

Security update for bind

This update for bind fixes the following issues

Upgrade to release 9.20.23:

  • CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591).
  • CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592).
  • CVE-2026-3593: Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation (bsc#1265593).
  • CVE-2026-5946: Invalid handling of CLASS != IN (bsc#1265594).
  • CVE-2026-5947: SIG(0) validation during query flood may lead to undefined behavior (bsc#1265595).
  • CVE-2026-5950: Unbounded resend loop in BIND 9 resolver (bsc#1265596).
Record
SUSE-SU-2026:22198-1
Updated
2026-11-02
OSVSUSE-SU-2026:2289-1 No score

Security update for bind

This update for bind fixes the following issues:

  • CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591).
  • CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592).
  • CVE-2026-5946: Invalid handling of CLASS != IN (bsc#1265594).
Record
SUSE-SU-2026:2289-1
Updated
2026-11-02
OSVSUSE-SU-2026:2616-1 No score

Security update for bind

This update for bind fixes the following issues:

  • CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592).
  • CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591).
  • CVE-2026-5946: Invalid handling of CLASS != IN (bsc#1265594).
Record
SUSE-SU-2026:2616-1
Updated
2026-11-02
OSVSUSE-SU-2026:2617-1 No score

Security update for bind

This update for bind fixes the following issues:

  • CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592).
  • CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591).
  • CVE-2026-5946: Invalid handling of CLASS != IN (bsc#1265594).
Record
SUSE-SU-2026:2617-1
Updated
2026-11-02
OSVSUSE-SU-2026:2673-1 No score

Security update for bind

This update for bind fixes the following issues:

Security issues:

  • CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591).
  • CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592).
  • CVE-2026-3593: Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation (bsc#1265593).
  • CVE-2026-5946: Invalid handling of CLASS != IN (bsc#1265594).
  • CVE-2026-5947: SIG(0) validation during query flood may lead to undefined behavior (bsc#1265595).
  • CVE-2026-5950: Unbounded resend loop in BIND 9 resolver (bsc#1265596).

Non security issue:

  • bind test failed with version 9.20.21 (bsc#1263494).
  • Upgrade to release 9.20.23
Record
SUSE-SU-2026:2673-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bind
Alpine:v3.20
 9.0.0 up to 9.18.49-r0
9.18.49-r0
bind
Alpine:v3.21
 9.0.0 up to 9.18.49-r0
9.18.49-r0
bind
Alpine:v3.22
 9.0.0 up to 9.20.23-r0
9.20.23-r0
bind
Alpine:v3.23
 9.0.0 up to 9.20.23-r0
9.20.23-r0
bind
Alpine:v3.24
 9.0.0 up to 9.20.23-r0
9.20.23-r0
bind9.16
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-chroot
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-dnssec-utils
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-doc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
Show 290 moreShow less
Affected packages
PackageAffectedFixed
bind9.16-libs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-license
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-utils
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
python3-bind9.16
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind
AlmaLinux:10
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-chroot
AlmaLinux:10
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-devel
AlmaLinux:10
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-dnssec-utils
AlmaLinux:10
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-doc
AlmaLinux:10
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-libs
AlmaLinux:10
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-license
AlmaLinux:10
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-utils
AlmaLinux:10
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-chroot
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-export-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-export-libs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-libs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-libs-lite
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-license
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-lite-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-libs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-utils
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-sdb
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-sdb-chroot
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-utils
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
python3-bind
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-chroot
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-dnssec-doc
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-dnssec-utils
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-doc
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-libs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-license
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-utils
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
python3-bind
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind9.18
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.18.29-14.el9_8.2
32:9.18.29-14.el9_8.2
bind9.18-chroot
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.18.29-14.el9_8.2
32:9.18.29-14.el9_8.2
bind9.18-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.18.29-14.el9_8.2
32:9.18.29-14.el9_8.2
bind9.18-dnssec-utils
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.18.29-14.el9_8.2
32:9.18.29-14.el9_8.2
bind9.18-doc
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.18.29-14.el9_8.2
32:9.18.29-14.el9_8.2
bind9.18-libs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.18.29-14.el9_8.2
32:9.18.29-14.el9_8.2
bind9.18-utils
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.18.29-14.el9_8.2
32:9.18.29-14.el9_8.2
bind
Azure Linux:3
 before 9.20.23-1
9.20.23-1
bind
Alpaquita:23
 9.18.11-r0 up to 9.18.49-r0
9.18.49-r0
bind
Alpaquita:25
 9.20.9-r0 up to 9.20.23-r0
9.20.23-r0
bind
Alpaquita:stream
 9.18.16-r0 up to 9.20.23-r0
9.20.23-r0
bind9
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
bind9-doc
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
bind9-host
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
bind9utils
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
dnsutils
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
libbind-dev
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
libbind-export-dev
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
libbind9-160
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
libdns-export1100
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
libdns1100
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
libirs-export160
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
libirs160
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
libisc-export169
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
libisc169
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
libisccc-export160
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
libisccc160
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
libisccfg-export160
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
libisccfg160
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
liblwres160
TuxCare:Ubuntu:18.04
 before 1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7
bind9
TuxCare:Ubuntu:16.04
 before 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
bind9-doc
TuxCare:Ubuntu:16.04
 before 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
bind9-host
TuxCare:Ubuntu:16.04
 before 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
bind9utils
TuxCare:Ubuntu:16.04
 before 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
dnsutils
TuxCare:Ubuntu:16.04
 before 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
host
TuxCare:Ubuntu:16.04
 before 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
libbind-dev
TuxCare:Ubuntu:16.04
 before 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
libbind-export-dev
TuxCare:Ubuntu:16.04
 before 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
libbind9-140
TuxCare:Ubuntu:16.04
 before 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
libdns-export162
TuxCare:Ubuntu:16.04
 before 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
libdns162
TuxCare:Ubuntu:16.04
 before 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
libirs-export141
TuxCare:Ubuntu:16.04
 before 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
libirs141
TuxCare:Ubuntu:16.04
 before 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
libisc-export160
TuxCare:Ubuntu:16.04
 before 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
libisc160
TuxCare:Ubuntu:16.04
 before 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
libisccc-export140
TuxCare:Ubuntu:16.04
 before 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
libisccc140
TuxCare:Ubuntu:16.04
 before 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
libisccfg-export140
TuxCare:Ubuntu:16.04
 before 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
libisccfg140
TuxCare:Ubuntu:16.04
 before 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
liblwres141
TuxCare:Ubuntu:16.04
 before 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
lwresd
TuxCare:Ubuntu:16.04
 before 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10
bind9
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
bind9-dnsutils
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
bind9-doc
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
bind9-host
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
bind9-libs
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
bind9-utils
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
bind9utils
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
dnsutils
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2
bind
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els10
32:9.16.23-11.el9_2.2.tuxcare.els10
bind-chroot
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els10
32:9.16.23-11.el9_2.2.tuxcare.els10
bind-devel
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els10
32:9.16.23-11.el9_2.2.tuxcare.els10
bind-dnssec-doc
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els10
32:9.16.23-11.el9_2.2.tuxcare.els10
bind-dnssec-utils
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els10
32:9.16.23-11.el9_2.2.tuxcare.els10
bind-doc
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els10
32:9.16.23-11.el9_2.2.tuxcare.els10
bind-libs
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els10
32:9.16.23-11.el9_2.2.tuxcare.els10
bind-license
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els10
32:9.16.23-11.el9_2.2.tuxcare.els10
bind-utils
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els10
32:9.16.23-11.el9_2.2.tuxcare.els10
python3-bind
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els10
32:9.16.23-11.el9_2.2.tuxcare.els10
bind
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-chroot
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-devel
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-export-devel
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-export-libs
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-libs
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-libs-lite
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-license
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-lite-devel
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-pkcs11
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-pkcs11-devel
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-pkcs11-libs
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-pkcs11-utils
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-sdb
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-sdb-chroot
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind-utils
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
32:9.11.4-26.0.3.P2.el7_9.16.tuxcare.els4
bind
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-chroot
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-devel
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-export-devel
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-export-libs
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-libs
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-libs-lite
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-license
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-lite-devel
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-pkcs11
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-pkcs11-devel
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-pkcs11-libs
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-pkcs11-utils
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-sdb
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-sdb-chroot
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind-utils
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
python3-bind
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 32:9.11.26-4.el8.4.tuxcare.els15
32:9.11.26-4.el8.4.tuxcare.els15
bind
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els13
33:9.11.4-26.P2.el7_9.16.tuxcare.els13
bind-chroot
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els13
33:9.11.4-26.P2.el7_9.16.tuxcare.els13
bind-devel
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els13
33:9.11.4-26.P2.el7_9.16.tuxcare.els13
bind-export-devel
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els13
33:9.11.4-26.P2.el7_9.16.tuxcare.els13
bind-export-libs
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els13
33:9.11.4-26.P2.el7_9.16.tuxcare.els13
bind9
Debian:12
 before 1:9.18.49-1~deb12u2, plus listed versions
1:9.18.12-11:9.18.13-11:9.18.16-11:9.18.16-1~deb12u11:9.18.16-1~deb12u1~bpo11+1
Show 11 moreShow less
1:9.18.19-1~deb12u11:9.18.19-1~deb12u1~bpo11+11:9.18.24-11:9.18.24-1~bpo11+11:9.18.28-1~deb12u11:9.18.28-1~deb12u21:9.18.33-1~deb12u21:9.18.41-1~deb12u11:9.18.44-1~deb12u11:9.18.47-1~deb12u11:9.18.49-1~deb12u1
1:9.18.49-1~deb12u2
bind9
Debian:13
 before 1:9.20.23-1~deb13u1, plus listed versions
1:9.20.11-41:9.20.15-11:9.20.15-1~deb13u11:9.20.15-1~deb13u1~bpo12+11:9.20.15-2
Show 12 moreShow less
1:9.20.18-11:9.20.18-1~deb13u11:9.20.18-1~deb13u1~bpo12+11:9.20.19-11:9.20.19-1~bpo12+11:9.20.20-11:9.20.20-1~bpo12+11:9.20.21-11:9.20.21-1~deb13u11:9.20.21-1~deb13u1~bpo12+11:9.20.22-11:9.20.23-1~deb13u1~bpo12+1
1:9.20.23-1~deb13u1
bind9
Debian:14
 before 1:9.20.23-1, plus listed versions
1:9.20.11-41:9.20.15-11:9.20.15-1~deb13u11:9.20.15-1~deb13u1~bpo12+11:9.20.15-2
Show 13 moreShow less
1:9.20.18-11:9.20.18-1~deb13u11:9.20.18-1~deb13u1~bpo12+11:9.20.19-11:9.20.19-1~bpo12+11:9.20.20-11:9.20.20-1~bpo12+11:9.20.21-11:9.20.21-1~deb13u11:9.20.21-1~deb13u1~bpo12+11:9.20.22-11:9.20.23-1~deb13u11:9.20.23-1~deb13u1~bpo12+1
1:9.20.23-1
bind
Mageia:9
From an advisory covering 6 CVEs
 before 9.18.49-1.mga9
9.18.49-1.mga9
bind
openEuler:24.03-LTS-SP3
From an advisory covering 3 CVEs
 before 9.18.21-9.oe2403sp3
9.18.21-9.oe2403sp3
bind
openEuler:24.03-LTS-SP1
From an advisory covering 3 CVEs
 before 9.18.21-8.oe2403sp1
9.18.21-8.oe2403sp1
bind
openEuler:20.03-LTS-SP4
From an advisory covering 3 CVEs
 before 9.11.21-24.oe2003sp4
9.11.21-24.oe2003sp4
bind
openEuler:22.03-LTS-SP4
From an advisory covering 3 CVEs
 before 9.16.23-30.oe2203sp4
9.16.23-30.oe2203sp4
bind
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:9.18.49-1.hum1
0:9.18.49-1.hum1
bind-chroot
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:9.18.49-1.hum1
0:9.18.49-1.hum1
bind-devel
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:9.18.49-1.hum1
0:9.18.49-1.hum1
bind-dnssec-utils
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:9.18.49-1.hum1
0:9.18.49-1.hum1
bind-doc
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:9.18.49-1.hum1
0:9.18.49-1.hum1
bind-libs
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:9.18.49-1.hum1
0:9.18.49-1.hum1
bind-utils
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:9.18.49-1.hum1
0:9.18.49-1.hum1
bind9.16
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-chroot
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-dnssec-utils
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-dnssec-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-license
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-utils
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
python3-bind9.16
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-debugsource
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-dnssec-utils-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-doc
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-libs
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-libs-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind9.16-utils-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.6
32:9.16.23-0.22.el8_10.6
bind
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-chroot
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-dnssec-utils
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-dnssec-utils-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-libs
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-libs-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-license
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-utils
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-utils-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind-doc
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 32:9.18.33-15.el10_2.2
32:9.18.33-15.el10_2.2
bind
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-chroot
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-export-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-libs-lite
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-libs-lite-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-license
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-lite-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-utils
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-sdb
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-sdb-chroot
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-sdb-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-utils
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
python3-bind
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-debugsource
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-export-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-export-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-export-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-libs-lite-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-pkcs11-utils-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-sdb-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind-utils-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 32:9.11.36-16.el8_10.8
32:9.11.36-16.el8_10.8
bind
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-chroot
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-dnssec-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-dnssec-utils
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-dnssec-utils-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-libs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-license
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-utils
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-utils-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
python3-bind
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind-dnssec-utils-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-40.el9_8.2
32:9.16.23-40.el9_8.2
bind9.16
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:9.16.23-0.22.el8_10.6
2:9.16.23-0.22.el8_10.6
bind
Rocky Linux:10
From an advisory covering 2 CVEs
 before 2:9.18.33-15.el10_2.2
2:9.18.33-15.el10_2.2
bind
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:9.11.36-16.el8_10.8
2:9.11.36-16.el8_10.8
bind
Rocky Linux:9
From an advisory covering 2 CVEs
 before 2:9.16.23-40.el9_8.2
2:9.16.23-40.el9_8.2
bind9.18
Rocky Linux:9
From an advisory covering 2 CVEs
 before 2:9.18.29-14.el9_8.2
2:9.18.29-14.el9_8.2
bind
SUSE:Linux Enterprise Server 16.0
From an advisory covering 6 CVEs
 before 9.20.23-160000.1.1
9.20.23-160000.1.1
bind
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 6 CVEs
 before 9.20.23-160000.1.1
9.20.23-160000.1.1
bind
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 3 CVEs
 before 9.16.50-150500.8.38.1
9.16.50-150500.8.38.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 3 CVEs
 before 9.16.50-150500.8.38.1
9.16.50-150500.8.38.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 9.16.50-150500.8.38.1
9.16.50-150500.8.38.1
bind
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 9.16.50-150500.8.38.1
9.16.50-150500.8.38.1
bind
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 3 CVEs
 before 9.16.50-150500.8.38.1
9.16.50-150500.8.38.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 3 CVEs
 before 9.16.50-150400.5.62.1
9.16.50-150400.5.62.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 9.16.50-150400.5.62.1
9.16.50-150400.5.62.1
bind
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 9.16.50-150400.5.62.1
9.16.50-150400.5.62.1
bind
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 3 CVEs
 before 9.16.50-150400.5.62.1
9.16.50-150400.5.62.1
bind
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 6 CVEs
 before 9.20.23-150700.3.25.1
9.20.23-150700.3.25.1
bind
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 6 CVEs
 before 9.20.23-150700.3.25.1
9.20.23-150700.3.25.1
bind
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 5 CVEs
 before 9.18.49-150600.3.26.1
9.18.49-150600.3.26.1
bind
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 5 CVEs
 before 9.18.49-150600.3.26.1
9.18.49-150600.3.26.1
bind
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 3 CVEs
 before 9.16.6-150300.22.59.1
9.16.6-150300.22.59.1
bind
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 3 CVEs
 before 9.16.6-150300.22.59.1
9.16.6-150300.22.59.1
bind
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 3 CVEs
 before 9.16.6-150300.22.59.1
9.16.6-150300.22.59.1
bind
SUSE:Multi Linux Manager Tools SLE-Micro-5
From an advisory covering 10 CVEs
 before 9.16.6-150000.12.91.1
9.16.6-150000.12.91.1
bind
SUSE:Manager Client Tools for SLE Micro 5
From an advisory covering 10 CVEs
 before 9.16.6-150000.12.91.1
9.16.6-150000.12.91.1
bind9
Ubuntu:Pro:14.04:LTS
 before 1:9.9.5.dfsg-3ubuntu0.19+esm14, plus listed versions
1:9.9.3.dfsg.P2-4ubuntu11:9.9.3.dfsg.P2-4ubuntu21:9.9.3.dfsg.P2-4ubuntu31:9.9.5.dfsg-21:9.9.5.dfsg-3
Show 31 moreShow less
1:9.9.5.dfsg-3ubuntu0.11:9.9.5.dfsg-3ubuntu0.21:9.9.5.dfsg-3ubuntu0.31:9.9.5.dfsg-3ubuntu0.41:9.9.5.dfsg-3ubuntu0.51:9.9.5.dfsg-3ubuntu0.61:9.9.5.dfsg-3ubuntu0.71:9.9.5.dfsg-3ubuntu0.81:9.9.5.dfsg-3ubuntu0.91:9.9.5.dfsg-3ubuntu0.101:9.9.5.dfsg-3ubuntu0.111:9.9.5.dfsg-3ubuntu0.121:9.9.5.dfsg-3ubuntu0.131:9.9.5.dfsg-3ubuntu0.141:9.9.5.dfsg-3ubuntu0.151:9.9.5.dfsg-3ubuntu0.161:9.9.5.dfsg-3ubuntu0.171:9.9.5.dfsg-3ubuntu0.181:9.9.5.dfsg-3ubuntu0.191:9.9.5.dfsg-3ubuntu0.19+esm11:9.9.5.dfsg-3ubuntu0.19+esm21:9.9.5.dfsg-3ubuntu0.19+esm31:9.9.5.dfsg-3ubuntu0.19+esm41:9.9.5.dfsg-3ubuntu0.19+esm51:9.9.5.dfsg-3ubuntu0.19+esm61:9.9.5.dfsg-3ubuntu0.19+esm71:9.9.5.dfsg-3ubuntu0.19+esm91:9.9.5.dfsg-3ubuntu0.19+esm101:9.9.5.dfsg-3ubuntu0.19+esm111:9.9.5.dfsg-3ubuntu0.19+esm121:9.9.5.dfsg-3ubuntu0.19+esm13
1:9.9.5.dfsg-3ubuntu0.19+esm14
bind9
Ubuntu:Pro:16.04:LTS
 before 1:9.10.3.dfsg.P4-8ubuntu1.19+esm10, plus listed versions
1:9.9.5.dfsg-11ubuntu11:9.9.5.dfsg-121:9.9.5.dfsg-12.11:9.9.5.dfsg-12.1ubuntu11:9.10.3.dfsg.P2-4
Show 32 moreShow less
1:9.10.3.dfsg.P2-51:9.10.3.dfsg.P4-31:9.10.3.dfsg.P4-41:9.10.3.dfsg.P4-51:9.10.3.dfsg.P4-81:9.10.3.dfsg.P4-8ubuntu11:9.10.3.dfsg.P4-8ubuntu1.11:9.10.3.dfsg.P4-8ubuntu1.21:9.10.3.dfsg.P4-8ubuntu1.31:9.10.3.dfsg.P4-8ubuntu1.41:9.10.3.dfsg.P4-8ubuntu1.51:9.10.3.dfsg.P4-8ubuntu1.61:9.10.3.dfsg.P4-8ubuntu1.71:9.10.3.dfsg.P4-8ubuntu1.81:9.10.3.dfsg.P4-8ubuntu1.91:9.10.3.dfsg.P4-8ubuntu1.101:9.10.3.dfsg.P4-8ubuntu1.111:9.10.3.dfsg.P4-8ubuntu1.121:9.10.3.dfsg.P4-8ubuntu1.141:9.10.3.dfsg.P4-8ubuntu1.151:9.10.3.dfsg.P4-8ubuntu1.161:9.10.3.dfsg.P4-8ubuntu1.171:9.10.3.dfsg.P4-8ubuntu1.181:9.10.3.dfsg.P4-8ubuntu1.191:9.10.3.dfsg.P4-8ubuntu1.19+esm11:9.10.3.dfsg.P4-8ubuntu1.19+esm21:9.10.3.dfsg.P4-8ubuntu1.19+esm31:9.10.3.dfsg.P4-8ubuntu1.19+esm51:9.10.3.dfsg.P4-8ubuntu1.19+esm61:9.10.3.dfsg.P4-8ubuntu1.19+esm71:9.10.3.dfsg.P4-8ubuntu1.19+esm81:9.10.3.dfsg.P4-8ubuntu1.19+esm9
1:9.10.3.dfsg.P4-8ubuntu1.19+esm10
bind9
Ubuntu:Pro:18.04:LTS
 before 1:9.11.3+dfsg-1ubuntu1.19+esm5, plus listed versions
1:9.10.3.dfsg.P4-12.6ubuntu11:9.11.2.P1-1ubuntu21:9.11.2.P1-1ubuntu31:9.11.2.P1-1ubuntu41:9.11.2.P1-1ubuntu5
Show 21 moreShow less
1:9.11.3+dfsg-1ubuntu11:9.11.3+dfsg-1ubuntu1.11:9.11.3+dfsg-1ubuntu1.21:9.11.3+dfsg-1ubuntu1.31:9.11.3+dfsg-1ubuntu1.51:9.11.3+dfsg-1ubuntu1.71:9.11.3+dfsg-1ubuntu1.81:9.11.3+dfsg-1ubuntu1.91:9.11.3+dfsg-1ubuntu1.101:9.11.3+dfsg-1ubuntu1.111:9.11.3+dfsg-1ubuntu1.121:9.11.3+dfsg-1ubuntu1.131:9.11.3+dfsg-1ubuntu1.141:9.11.3+dfsg-1ubuntu1.151:9.11.3+dfsg-1ubuntu1.161:9.11.3+dfsg-1ubuntu1.171:9.11.3+dfsg-1ubuntu1.181:9.11.3+dfsg-1ubuntu1.19+esm11:9.11.3+dfsg-1ubuntu1.19+esm21:9.11.3+dfsg-1ubuntu1.19+esm31:9.11.3+dfsg-1ubuntu1.19+esm4
1:9.11.3+dfsg-1ubuntu1.19+esm5
bind9
Ubuntu:Pro:20.04:LTS
 before 1:9.18.30-0ubuntu0.20.04.2+esm2, plus listed versions
1:9.11.5.P4+dfsg-5.1ubuntu21:9.11.5.P4+dfsg-5.1ubuntu31:9.11.5.P4+dfsg-5.1ubuntu41:9.11.5.P4+dfsg-5.1ubuntu51:9.11.14+dfsg-1ubuntu1
Show 25 moreShow less
1:9.11.14+dfsg-3ubuntu11:9.16.0-1ubuntu31:9.16.0-1ubuntu41:9.16.0-1ubuntu51:9.16.1-0ubuntu11:9.16.1-0ubuntu21:9.16.1-0ubuntu2.11:9.16.1-0ubuntu2.21:9.16.1-0ubuntu2.31:9.16.1-0ubuntu2.41:9.16.1-0ubuntu2.61:9.16.1-0ubuntu2.71:9.16.1-0ubuntu2.81:9.16.1-0ubuntu2.91:9.16.1-0ubuntu2.101:9.16.1-0ubuntu2.111:9.16.1-0ubuntu2.121:9.16.1-0ubuntu2.141:9.16.1-0ubuntu2.151:9.16.1-0ubuntu2.161:9.16.48-0ubuntu0.20.04.11:9.18.28-0ubuntu0.20.04.11:9.18.30-0ubuntu0.20.04.11:9.18.30-0ubuntu0.20.04.21:9.18.30-0ubuntu0.20.04.2+esm1
1:9.18.30-0ubuntu0.20.04.2+esm2
bind9-libs
Ubuntu:20.04:LTS
 All versions, plus listed versions
1:9.11.16+dfsg-3~build11:9.11.16+dfsg-3~ubuntu1
 None known
bind9
Ubuntu:22.04:LTS
 before 1:9.18.39-0ubuntu0.22.04.4, plus listed versions
1:9.16.15-1ubuntu11:9.16.15-1ubuntu21:9.16.15-1ubuntu31:9.18.0-2ubuntu11:9.18.0-2ubuntu2
Show 17 moreShow less
1:9.18.0-2ubuntu31:9.18.1-1ubuntu11:9.18.1-1ubuntu1.11:9.18.1-1ubuntu1.21:9.18.1-1ubuntu1.31:9.18.12-0ubuntu0.22.04.11:9.18.12-0ubuntu0.22.04.21:9.18.12-0ubuntu0.22.04.31:9.18.18-0ubuntu0.22.04.11:9.18.18-0ubuntu0.22.04.21:9.18.24-0ubuntu0.22.04.11:9.18.28-0ubuntu0.22.04.11:9.18.30-0ubuntu0.22.04.11:9.18.30-0ubuntu0.22.04.21:9.18.39-0ubuntu0.22.04.11:9.18.39-0ubuntu0.22.04.21:9.18.39-0ubuntu0.22.04.3
1:9.18.39-0ubuntu0.22.04.4
bind9-libs
Ubuntu:22.04:LTS
 All versions, plus listed versions
1:9.11.19+dfsg-2.1ubuntu11:9.11.19+dfsg-2.1ubuntu21:9.11.19+dfsg-2.1ubuntu3
 None known
bind9
Ubuntu:24.04:LTS
 before 1:9.18.39-0ubuntu0.24.04.5, plus listed versions
1:9.18.18-0ubuntu21:9.18.21-0ubuntu11:9.18.24-0ubuntu31:9.18.24-0ubuntu41:9.18.24-0ubuntu5
Show 6 moreShow less
1:9.18.28-0ubuntu0.24.04.11:9.18.30-0ubuntu0.24.04.11:9.18.30-0ubuntu0.24.04.21:9.18.39-0ubuntu0.24.04.11:9.18.39-0ubuntu0.24.04.21:9.18.39-0ubuntu0.24.04.3
1:9.18.39-0ubuntu0.24.04.5
bind9
Ubuntu:25.10
 before 1:9.20.11-1ubuntu2.4, plus listed versions
1:9.20.4-3ubuntu11:9.20.4-3ubuntu21:9.20.4-3ubuntu31:9.20.9-2ubuntu11:9.20.10-1ubuntu1
Show 4 moreShow less
1:9.20.11-1ubuntu11:9.20.11-1ubuntu21:9.20.11-1ubuntu2.11:9.20.11-1ubuntu2.2
1:9.20.11-1ubuntu2.4
bind9
Ubuntu:26.04:LTS
 before 1:9.20.18-1ubuntu2.1, plus listed versions
1:9.20.11-1ubuntu21:9.20.11-1ubuntu31:9.20.18-1ubuntu11:9.20.18-1ubuntu2
1:9.20.18-1ubuntu2.1
bind9
Ubuntu:Pro:14.04:LTS
From an advisory covering 3 CVEs
 before 1:9.9.5.dfsg-3ubuntu0.19+esm14, plus listed versions
1:9.9.3.dfsg.P2-4ubuntu11:9.9.3.dfsg.P2-4ubuntu21:9.9.3.dfsg.P2-4ubuntu31:9.9.5.dfsg-21:9.9.5.dfsg-3
Show 31 moreShow less
1:9.9.5.dfsg-3ubuntu0.11:9.9.5.dfsg-3ubuntu0.21:9.9.5.dfsg-3ubuntu0.31:9.9.5.dfsg-3ubuntu0.41:9.9.5.dfsg-3ubuntu0.51:9.9.5.dfsg-3ubuntu0.61:9.9.5.dfsg-3ubuntu0.71:9.9.5.dfsg-3ubuntu0.81:9.9.5.dfsg-3ubuntu0.91:9.9.5.dfsg-3ubuntu0.101:9.9.5.dfsg-3ubuntu0.111:9.9.5.dfsg-3ubuntu0.121:9.9.5.dfsg-3ubuntu0.131:9.9.5.dfsg-3ubuntu0.141:9.9.5.dfsg-3ubuntu0.151:9.9.5.dfsg-3ubuntu0.161:9.9.5.dfsg-3ubuntu0.171:9.9.5.dfsg-3ubuntu0.181:9.9.5.dfsg-3ubuntu0.191:9.9.5.dfsg-3ubuntu0.19+esm11:9.9.5.dfsg-3ubuntu0.19+esm21:9.9.5.dfsg-3ubuntu0.19+esm31:9.9.5.dfsg-3ubuntu0.19+esm41:9.9.5.dfsg-3ubuntu0.19+esm51:9.9.5.dfsg-3ubuntu0.19+esm61:9.9.5.dfsg-3ubuntu0.19+esm71:9.9.5.dfsg-3ubuntu0.19+esm91:9.9.5.dfsg-3ubuntu0.19+esm101:9.9.5.dfsg-3ubuntu0.19+esm111:9.9.5.dfsg-3ubuntu0.19+esm121:9.9.5.dfsg-3ubuntu0.19+esm13
1:9.9.5.dfsg-3ubuntu0.19+esm14
bind9
Ubuntu:Pro:16.04:LTS
From an advisory covering 3 CVEs
 before 1:9.10.3.dfsg.P4-8ubuntu1.19+esm10, plus listed versions
1:9.9.5.dfsg-11ubuntu11:9.9.5.dfsg-121:9.9.5.dfsg-12.11:9.9.5.dfsg-12.1ubuntu11:9.10.3.dfsg.P2-4
Show 32 moreShow less
1:9.10.3.dfsg.P2-51:9.10.3.dfsg.P4-31:9.10.3.dfsg.P4-41:9.10.3.dfsg.P4-51:9.10.3.dfsg.P4-81:9.10.3.dfsg.P4-8ubuntu11:9.10.3.dfsg.P4-8ubuntu1.11:9.10.3.dfsg.P4-8ubuntu1.21:9.10.3.dfsg.P4-8ubuntu1.31:9.10.3.dfsg.P4-8ubuntu1.41:9.10.3.dfsg.P4-8ubuntu1.51:9.10.3.dfsg.P4-8ubuntu1.61:9.10.3.dfsg.P4-8ubuntu1.71:9.10.3.dfsg.P4-8ubuntu1.81:9.10.3.dfsg.P4-8ubuntu1.91:9.10.3.dfsg.P4-8ubuntu1.101:9.10.3.dfsg.P4-8ubuntu1.111:9.10.3.dfsg.P4-8ubuntu1.121:9.10.3.dfsg.P4-8ubuntu1.141:9.10.3.dfsg.P4-8ubuntu1.151:9.10.3.dfsg.P4-8ubuntu1.161:9.10.3.dfsg.P4-8ubuntu1.171:9.10.3.dfsg.P4-8ubuntu1.181:9.10.3.dfsg.P4-8ubuntu1.191:9.10.3.dfsg.P4-8ubuntu1.19+esm11:9.10.3.dfsg.P4-8ubuntu1.19+esm21:9.10.3.dfsg.P4-8ubuntu1.19+esm31:9.10.3.dfsg.P4-8ubuntu1.19+esm51:9.10.3.dfsg.P4-8ubuntu1.19+esm61:9.10.3.dfsg.P4-8ubuntu1.19+esm71:9.10.3.dfsg.P4-8ubuntu1.19+esm81:9.10.3.dfsg.P4-8ubuntu1.19+esm9
1:9.10.3.dfsg.P4-8ubuntu1.19+esm10
bind9
Ubuntu:Pro:18.04:LTS
From an advisory covering 3 CVEs
 before 1:9.11.3+dfsg-1ubuntu1.19+esm5, plus listed versions
1:9.10.3.dfsg.P4-12.6ubuntu11:9.11.2.P1-1ubuntu21:9.11.2.P1-1ubuntu31:9.11.2.P1-1ubuntu41:9.11.2.P1-1ubuntu5
Show 21 moreShow less
1:9.11.3+dfsg-1ubuntu11:9.11.3+dfsg-1ubuntu1.11:9.11.3+dfsg-1ubuntu1.21:9.11.3+dfsg-1ubuntu1.31:9.11.3+dfsg-1ubuntu1.51:9.11.3+dfsg-1ubuntu1.71:9.11.3+dfsg-1ubuntu1.81:9.11.3+dfsg-1ubuntu1.91:9.11.3+dfsg-1ubuntu1.101:9.11.3+dfsg-1ubuntu1.111:9.11.3+dfsg-1ubuntu1.121:9.11.3+dfsg-1ubuntu1.131:9.11.3+dfsg-1ubuntu1.141:9.11.3+dfsg-1ubuntu1.151:9.11.3+dfsg-1ubuntu1.161:9.11.3+dfsg-1ubuntu1.171:9.11.3+dfsg-1ubuntu1.181:9.11.3+dfsg-1ubuntu1.19+esm11:9.11.3+dfsg-1ubuntu1.19+esm21:9.11.3+dfsg-1ubuntu1.19+esm31:9.11.3+dfsg-1ubuntu1.19+esm4
1:9.11.3+dfsg-1ubuntu1.19+esm5
bind9
Ubuntu:Pro:20.04:LTS
From an advisory covering 3 CVEs
 before 1:9.18.30-0ubuntu0.20.04.2+esm2, plus listed versions
1:9.11.5.P4+dfsg-5.1ubuntu21:9.11.5.P4+dfsg-5.1ubuntu31:9.11.5.P4+dfsg-5.1ubuntu41:9.11.5.P4+dfsg-5.1ubuntu51:9.11.14+dfsg-1ubuntu1
Show 25 moreShow less
1:9.11.14+dfsg-3ubuntu11:9.16.0-1ubuntu31:9.16.0-1ubuntu41:9.16.0-1ubuntu51:9.16.1-0ubuntu11:9.16.1-0ubuntu21:9.16.1-0ubuntu2.11:9.16.1-0ubuntu2.21:9.16.1-0ubuntu2.31:9.16.1-0ubuntu2.41:9.16.1-0ubuntu2.61:9.16.1-0ubuntu2.71:9.16.1-0ubuntu2.81:9.16.1-0ubuntu2.91:9.16.1-0ubuntu2.101:9.16.1-0ubuntu2.111:9.16.1-0ubuntu2.121:9.16.1-0ubuntu2.141:9.16.1-0ubuntu2.151:9.16.1-0ubuntu2.161:9.16.48-0ubuntu0.20.04.11:9.18.28-0ubuntu0.20.04.11:9.18.30-0ubuntu0.20.04.11:9.18.30-0ubuntu0.20.04.21:9.18.30-0ubuntu0.20.04.2+esm1
1:9.18.30-0ubuntu0.20.04.2+esm2
bind
openSUSE:Tumbleweed
From an advisory covering 5 CVEs
 before 9.20.23-1.1
9.20.23-1.1
bind
openSUSE:Leap 16.0
From an advisory covering 6 CVEs
 before 9.20.23-160000.1.1
9.20.23-160000.1.1

History

History
RecordedChangedSources
affected, facts
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-3039 is a high vulnerability (CVSS 7.5) in Isc Bind, published May 20, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.09%, the 65th percentile. Fixed in bind 9.18.49-r0.

References

Show 144 moreShow less
This page doesn't list everything

Left out here: 119 package rows. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 5 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open