https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:07:47.952130+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-5947 BELL-CVE-2026-5947 2026-10-02T22:07:48.091730+00:00

Affected: Alpaquita:23: bind, Alpaquita:25: bind, Alpaquita:stream: bind

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0626 certfr-2026-avi-0626 — De multiples vulnérabilités ont été découvertes dans ISC BIND. Elles permettent à un attaquant de provoquer un déni de… 2026-10-02T22:07:48.091801+00:00 certfr-2026-avi-0626 https://cve.radiocsirt.org/vuln/euvd-2026-362293 EUVD-2026-362293 2026-10-02T22:07:48.091833+00:00 EUVD-2026-362293 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5947 fkie_cve-2026-5947 2026-10-02T22:07:48.091860+00:00

Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signed with SIG(0), it begins work to validate that signature. If, during that validation, the "recursive-clients" limit is reached (as would occur during a query flood), and that same DNS message is discarded per the limit, there is a brief window of time while the SIG(0) validation may attempt to read the now-discarded DNS message. This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, and 9.20.9-S1 through 9.20.22-S1. BIND 9 versions 9.18.28 through 9.18.49 and 9.18.28-S1 through 9.18.49-S1 are NOT affected.

 https://cve.radiocsirt.org/vuln/ghsa-6mm6-m775-chpm GHSA-6mm6-m775-chpm 2026-10-02T22:07:48.091910+00:00

Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signed with SIG(0), it begins work to validate that signature. If, during that validation, the "recursive-clients" limit is reached (as would occur during a query flood), and that same DNS message is discarded per the limit, there is a brief window of time while the SIG(0) validation may attempt to read the now-discarded DNS message. This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, and 9.20.9-S1 through 9.20.22-S1. BIND 9 versions 9.18.28 through 9.18.49 and 9.18.28-S1 through 9.18.49-S1 are NOT affected.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-5947 msrc_CVE-2026-5947 — SIG(0) validation during query flood may lead to undefined behavior 2026-10-02T22:07:48.091931+00:00 msrc_CVE-2026-5947 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10874-1 openSUSE-SU-2026:10874-1 — bind-9.20.23-1.1 on GA media 2026-10-02T22:07:48.091956+00:00

bind-9.20.23-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:7412 RHSA-2026:7412 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T22:07:48.091987+00:00

bind: Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation bind: SIG(0) validation during query flood may lead to undefined behavior

 https://cve.radiocsirt.org/vuln/suse-su-2026:22198-1 SUSE-SU-2026:22198-1 — Security update for bind 2026-10-02T22:07:48.092018+00:00

Security update for bind

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-5947 UBUNTU-CVE-2026-5947 2026-10-02T22:07:48.092050+00:00

Affected: Ubuntu:25.10: bind9, Ubuntu:26.04:LTS: bind9

Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signed with SIG(0), it begins work to validate that signature. If, during that validation, the "recursive-clients" limit is reached (as would occur during a query flood), and that same DNS message is discarded per the limit, there is a brief window of time while the SIG(0) validation may attempt to read the now-discarded DNS message. This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, and 9.20.9-S1 through 9.20.22-S1. BIND 9 versions 9.18.28 through 9.18.49 and 9.18.28-S1 through 9.18.49-S1 are NOT affected.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1626 WID-SEC-W-2026-1626 — Internet Systems Consortium BIND: Mehrere Schwachstellen 2026-10-02T22:07:48.092090+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um eine Speicherbeschädigung auszulösen oder einen Denial-of-Service-Zustand zu verursachen.