https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:49:25.277009+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:7915 ALSA-2026:7915 — Important: bind9.18 security update 2026-10-02T17:49:25.882640+00:00

Affected: AlmaLinux:9: bind9.18, AlmaLinux:9: bind9.18-chroot, AlmaLinux:9: bind9.18-devel, AlmaLinux:9: bind9.18-dnssec-utils, AlmaLinux:9: bind9.18-doc, AlmaLinux:9: bind9.18-libs, AlmaLinux:9: bind9.18-utils

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

* bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-08885 bdu:2026-08885 2026-10-02T17:49:25.882724+00:00 bdu:2026-08885 https://cve.radiocsirt.org/vuln/bell-cve-2026-1519 BELL-CVE-2026-1519 2026-10-02T17:49:25.882742+00:00

Affected: Alpaquita:23: bind, Alpaquita:25: bind, Alpaquita:stream: bind

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0360 certfr-2026-avi-0360 — De multiples vulnérabilités ont été découvertes dans ISC BIND. Elles permettent à un attaquant de provoquer un déni de… 2026-10-02T17:49:25.882771+00:00 certfr-2026-avi-0360 https://cve.radiocsirt.org/vuln/euvd-2026-370207 EUVD-2026-370207 2026-10-02T17:49:25.882811+00:00 EUVD-2026-370207 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1519 fkie_cve-2026-1519 2026-10-02T17:49:25.882822+00:00

If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries). This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.

 https://cve.radiocsirt.org/vuln/ghsa-84m6-p53c-x4wp GHSA-84m6-p53c-x4wp 2026-10-02T17:49:25.882860+00:00

If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries). This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-1519 msrc_CVE-2026-1519 — Excessive NSEC3 iterations cause high CPU load during insecure delegation validation 2026-10-02T17:49:25.882876+00:00 msrc_CVE-2026-1519 https://cve.radiocsirt.org/vuln/oesa-2026-2058 OESA-2026-2058 — bind security update 2026-10-02T17:49:25.882892+00:00

Affected: openEuler:22.03-LTS-SP4: bind

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es):

If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries). This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.(CVE-2026-1519)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10448-1 openSUSE-SU-2026:10448-1 — bind-9.20.21-1.1 on GA media 2026-10-02T17:49:25.882918+00:00

bind-9.20.21-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:11372 RHSA-2026:11372 — Red Hat Security Advisory: bind security update 2026-10-02T17:49:25.882937+00:00

bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone

 https://cve.radiocsirt.org/vuln/suse-su-2026:1209-1 SUSE-SU-2026:1209-1 — Security update for bind 2026-10-02T17:49:25.882953+00:00

Security update for bind

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-1519 UBUNTU-CVE-2026-1519 2026-10-02T17:49:25.882966+00:00

Affected: Ubuntu:Pro:14.04:LTS: bind9, Ubuntu:Pro:16.04:LTS: bind9, Ubuntu:Pro:18.04:LTS: bind9, Ubuntu:18.04:LTS: isc-dhcp, Ubuntu:Pro:20.04:LTS: bind9, Ubuntu:20.04:LTS: bind9-libs, Ubuntu:22.04:LTS: bind9, Ubuntu:22.04:LTS: bind9-libs, Ubuntu:24.04:LTS: bind9, Ubuntu:24.04:LTS: isc-dhcp and 3 more

If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries). This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0863 WID-SEC-W-2026-0863 — Internet Systems Consortium BIND: Mehrere Schwachstellen 2026-10-02T17:49:25.883004+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsmaßnahmen zu umgehen.