https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:34:27.417015+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-11605 BELL-CVE-2026-11605 2026-10-04T11:34:27.577888+00:00

Affected: Alpaquita:25: bind, Alpaquita:stream: bind

 https://cve.radiocsirt.org/vuln/euvd-2026-339641 EUVD-2026-339641 2026-10-04T11:34:27.577941+00:00 EUVD-2026-339641 https://cve.radiocsirt.org/vuln/fkie_cve-2026-11605 fkie_cve-2026-11605 2026-10-04T11:34:27.577956+00:00

The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG records causes the validator to waste disproportionate CPU time. This issue affects BIND 9 versions 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, and 9.20.9-S1 through 9.20.24-S1.

 https://cve.radiocsirt.org/vuln/ghsa-qhh7-j7w3-xfxq GHSA-qhh7-j7w3-xfxq 2026-10-04T11:34:27.577984+00:00

The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG records causes the validator to waste disproportionate CPU time. This issue affects BIND 9 versions 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, and 9.20.9-S1 through 9.20.24-S1.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-11605 msrc_CVE-2026-11605 — Unnecessary validation of DNSSEC signed records 2026-10-04T11:34:27.578000+00:00 msrc_CVE-2026-11605 https://cve.radiocsirt.org/vuln/oesa-2026-3290 OESA-2026-3290 — bind security update 2026-10-04T11:34:27.578017+00:00

Affected: openEuler:24.03-LTS-SP4: bind

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es):

BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-10723)

If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit.

BIND will first need to store a DNS record for a key (KEY, DNSKEY, etc.). That key must specify a PRIVATEDNS algorithm (253), and in the algorithm identifier, improperly give a length longer than the actual identifier data. The invalid identifier will be stored. If BIND later needs to render that record to text, it will use the invalid length during processing, leading to a consistency check failing. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-10822)

An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies ca…

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11375-1 openSUSE-SU-2026:11375-1 — bind-9.20.26-1.1 on GA media 2026-10-04T11:34:27.578066+00:00

bind-9.20.26-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:42853 RHSA-2026:42853 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-04T11:34:27.578087+00:00

bind: bind9: Unnecessary validation of DNSSEC signed records

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-11605 UBUNTU-CVE-2026-11605 2026-10-04T11:34:27.578101+00:00

Affected: Ubuntu:26.04:LTS: bind9

The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG records causes the validator to waste disproportionate CPU time. This issue affects BIND 9 versions 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, and 9.20.9-S1 through 9.20.24-S1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2484 WID-SEC-W-2026-2484 — Internet Systems Consortium BIND: Mehrere Schwachstellen 2026-10-04T11:34:27.578120+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.