Isc Bind 9 vulnerabilities

• isc bind 9 Specific RPZ configurations and query patterns may result in an unexpected exit CVE-2026-97313 Fix available 7.5 HighOctober 21, 2026
• isc bind 9 Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization CVE-2026-96888 Fix available 7.5 HighOctober 21, 2026
• isc bind 9 Concurrent GSS-TSIG messages corrupt memory CVE-2026-94300 Public exploitFix available 8.1 HighOctober 21, 2026
• isc bind 9 Amplified resource exhaustion in inbound message processing CVE-2026-19630 Fix available 7.5 HighOctober 21, 2026
• isc bind 9 NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets CVE-2026-77119 Fix available 5.9 MediumSeptember 16, 2026
• isc bind 9 Message parser retains every identical singleton RDATA, enabling wire-to-work amplification CVE-2026-75029 Fix available 5.3 MediumSeptember 16, 2026
• isc bind 9 Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching CVE-2026-19668 Fix available 5.3 MediumSeptember 16, 2026
• isc bind 9 Unauthenticated IXFR deltas are applied to the live zone before TSIG verification CVE-2026-19033 Fix available 6.5 MediumSeptember 16, 2026
• isc bind 9 Validating resolver can abort while caching a mismatched NOQNAME proof CVE-2026-80274 Fix available 7.5 HighSeptember 16, 2026
• isc bind 9 named aborts on a TKEY query when the user configuration has no global options statement CVE-2026-76163 Fix available 7.5 HighSeptember 16, 2026
• isc bind 9 Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path CVE-2026-19666 Fix available 7.5 HighSeptember 16, 2026
• isc bind 9 SVCB AliasMode additional-data error leaks qpcache references CVE-2026-81563 Fix available 7.5 HighSeptember 16, 2026
• isc bind 9 Out-of-zone database nodes can become authoritative zone cuts CVE-2026-78301 Fix available 5.8 MediumSeptember 16, 2026
• isc bind 9 Unauthenticated remote crash of named via a single DoH SIG(0) request CVE-2026-77692 Fix available 7.5 HighSeptember 16, 2026
• isc bind 9 checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proof CVE-2026-19941 Fix available 5.9 MediumSeptember 16, 2026
• isc bind 9 qpcache NOQNAME proof use-after-free crashes recursive resolver CVE-2026-19662 Fix available 5.9 MediumSeptember 16, 2026
• isc bind 9 Remote assertion failure via 16-bit length truncation in `dns_ncache_add()` CVE-2026-19667 Fix available 7.5 HighSeptember 16, 2026
• isc bind 9 Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees CVE-2026-81736 Fix available 7.5 HighSeptember 16, 2026
• isc bind, bind 9 +1 more DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field CVE-2026-13321 Fix available 8.6 HighJuly 22, 2026
• isc bind, bind 9 +1 more Unexpected exit in certain situations with NSEC and NSEC3 both present CVE-2026-13204 Fix available 7.5 HighJuly 22, 2026
• isc bind, bind 9 +1 more Record ordering based unexpected exit with CNAME or DNAME CVE-2026-12617 Fix available 7.5 HighJuly 22, 2026
• isc bind, bind 9 +1 more Cache poisoning possible with label count discrepancy, RRSIG, and wildcards CVE-2026-11721 Fix available 7.5 HighJuly 22, 2026
• isc bind, bind 9 +1 more Potential memory usage beyond configured limits CVE-2026-11622 Fix available 7.5 HighJuly 22, 2026
• isc bind, bind 9 +1 more Unnecessary validation of DNSSEC signed records CVE-2026-11605 Fix available 7.5 HighJuly 22, 2026
• isc bind, bind 9 +1 more Potential wildcard CNAME RPZ policy bypass CVE-2026-11331 Fix available 7.5 HighJuly 22, 2026
• isc bind, bind 9 +1 more Key Record using PRIVATEDNS algorithm may lead to unexpected exit CVE-2026-10822 Fix available 6.5 MediumJuly 22, 2026
• isc bind, bind 9 +1 more Incorrect acceptance of NSEC3 records CVE-2026-10723 Fix available 6.8 MediumJuly 22, 2026
• isc bind, bind 9 +1 more Unbounded resend loop in BIND 9 resolver CVE-2026-5950 Public exploitFix available 5.3 MediumMay 20, 2026
• isc bind, bind 9, red hat enterprise linux 10 +6 more +8 more SIG(0) validation during query flood may lead to undefined behavior CVE-2026-5947 Fix available 7.5 HighMay 20, 2026
• isc bind, bind 9, red hat enterprise linux 10 +9 more +11 more Invalid handling of CLASS != IN CVE-2026-5946 Fix available 7.5 HighMay 20, 2026
• isc bind, bind 9, red hat enterprise linux 10 +6 more +8 more Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation CVE-2026-3593 Fix available 7.4 HighMay 20, 2026
• isc bind, bind 9 +1 more Amplification vulnerabilities via self-pointed glue records CVE-2026-3592 Fix available 5.3 MediumMay 20, 2026
• isc bind, bind 9, red hat enterprise linux 10 +9 more +11 more BIND 9 server memory exhaustion during GSS-API TKEY negotiation CVE-2026-3039 Fix available 7.5 HighMay 20, 2026
• isc bind, bind 9 +1 more A stack use-after-return flaw in SIG(0) handling code may enable ACL bypass CVE-2026-3591 Fix available 5.4 MediumMarch 25, 2026
• isc bind, bind 9 +1 more Authenticated query containing a TKEY record may cause named to terminate unexpectedly CVE-2026-3119 Fix available 6.5 MediumMarch 25, 2026
• isc bind, bind 9, red hat enterprise linux 10 +6 more +8 more Memory leak in code preparing DNSSEC proofs of non-existence CVE-2026-3104 Fix available 7.5 HighMarch 25, 2026
• isc bind, bind 9, red hat enterprise linux 10 +25 more +27 more Excessive NSEC3 iterations cause high CPU load during insecure delegation validation CVE-2026-1519 Fix available 7.5 HighMarch 25, 2026
• isc bind 9, red hat enterprise linux 10, enterprise linux 6 +5 more +7 more Malformed BRID/HHIT records can cause named to terminate unexpectedly CVE-2025-13878 Fix available 7.5 HighJanuary 21, 2026
• isc bind 9 Resource exhaustion via malformed DNSKEY handling CVE-2025-8677 Fix available EPSS 10.7% 7.5 HighOctober 22, 2025
• isc bind 9 Cache poisoning due to weak PRNG CVE-2025-40780 Fix available 8.6 HighOctober 22, 2025
• isc bind 9 Cache poisoning attacks with unsolicited RRs CVE-2025-40778 Public exploitFix available 8.6 HighOctober 22, 2025
• isc bind 9 Birthday Attack against Resolvers supporting ECS CVE-2025-40776 Fix available 8.6 HighJuly 16, 2025
• isc bind 9 A possible assertion failure when 'stale-answer-client-timeout' is set to '0' CVE-2025-40777 Fix available 7.5 HighJuly 16, 2025
• isc bind 9 DNS message with invalid TSIG causes an assertion failure CVE-2025-40775 Public exploitFix available EPSS 15.3% 7.5 HighMay 21, 2025
• isc bind 9 DNS-over-HTTPS implementation suffers from multiple issues under heavy query load CVE-2024-12705 Fix available EPSS 18.6% 7.5 HighJanuary 29, 2025
• isc bind 9 Many records in the additional section cause CPU exhaustion CVE-2024-11187 Fix available EPSS 16.0% 7.5 HighJanuary 29, 2025
• isc bind, bind 9 +1 more Assertion failure when serving both stale cache data and authoritative zone content CVE-2024-4076 Fix available 7.5 HighJuly 23, 2024
• isc bind, bind 9 +1 more SIG(0) can be used to exhaust CPU resources CVE-2024-1975 Fix available 7.5 HighJuly 23, 2024
• isc bind, bind 9 +1 more BIND's database will be slow if a very large number of RRs exist at the same name CVE-2024-1737 Fix available 7.5 HighJuly 23, 2024
• isc bind, bind 9 +1 more A flood of DNS messages over TCP may make the server unstable CVE-2024-0760 Public exploitFix available 7.5 HighJuly 23, 2024
• Show olderLoading…