https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T11:20:56.017328+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-19667 BELL-CVE-2026-19667 2026-10-06T11:20:56.166040+00:00

Affected: Alpaquita:23: bind, Alpaquita:25: bind, Alpaquita:stream: bind

 https://cve.radiocsirt.org/vuln/euvd-2026-371423 EUVD-2026-371423 2026-10-06T11:20:56.166102+00:00 EUVD-2026-371423 https://cve.radiocsirt.org/vuln/fkie_cve-2026-19667 fkie_cve-2026-19667 2026-10-06T11:20:56.166117+00:00

If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in `named` results in a negative cache entry of 0 bytes. When this entry is subsequently read, `named` aborts. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.

 https://cve.radiocsirt.org/vuln/ghsa-m9xv-gf7q-4vjg GHSA-m9xv-gf7q-4vjg 2026-10-06T11:20:56.166143+00:00

If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in `named` results in a negative cache entry of 0 bytes. When this entry is subsequently read, `named` aborts. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-19667 msrc_CVE-2026-19667 — Remote assertion failure via 16-bit length truncation in `dns_ncache_add()` 2026-10-06T11:20:56.166160+00:00 msrc_CVE-2026-19667 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11916-1 openSUSE-SU-2026:11916-1 — bind-9.20.29-1.1 on GA media 2026-10-06T11:20:56.166177+00:00

bind-9.20.29-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:68279 RHSA-2026:68279 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-06T11:20:56.166199+00:00

bind: BIND: Unauthorized zone content updates via unauthenticated IXFR deltas bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses bind: BIND: Denial of Service via malformed DNS64 responses bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling bind: BIND: Denial of Service via invalid DNSSEC records bind9: bind: BIND 9: DNS wildcard record existence can be masked by an attacker via inapplicable NSEC records bind: BIND 9: Denial of Service via crafted query responses bind: BIND: Denial of Service via TKEY query with specific configuration bind9: bind: BIND 9: DNSSEC bypass via NSEC3 insecure-referral proof bind: BIND: Remote Denial of Service via crafted DNS-over-HTTPS request bind: BIND: DNS cache poisoning via malformed zone insertion bind: BIND: Denial of Service via crafted DNSSEC reply bind: BIND resolver: Denial of Service due to resource exhaustion in SVCB/HTTPS AliasMode processing bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records

 https://cve.radiocsirt.org/vuln/rlsa-2026:75578 RLSA-2026:75578 — Important: bind9.18 security update 2026-10-06T11:20:56.166238+00:00

Affected: Rocky Linux:9: bind9.18

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

* bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records (CVE-2026-81736)

* bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling (CVE-2026-19667)

* bind: BIND resolver: Denial of Service due to resource exhaustion in SVCB/HTTPS AliasMode processing (CVE-2026-81563)

* bind: BIND: Denial of Service via crafted DNSSEC reply (CVE-2026-80274)

* bind: BIND: Denial of Service via malformed DNS64 responses (CVE-2026-19666)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-19667 UBUNTU-CVE-2026-19667 2026-10-06T11:20:56.166268+00:00

Affected: Ubuntu:Pro:14.04:LTS: bind9, Ubuntu:Pro:16.04:LTS: bind9, Ubuntu:Pro:18.04:LTS: bind9, Ubuntu:18.04:LTS: isc-dhcp, Ubuntu:Pro:20.04:LTS: bind9, Ubuntu:20.04:LTS: bind9-libs, Ubuntu:22.04:LTS: bind9, Ubuntu:22.04:LTS: bind9-libs, Ubuntu:24.04:LTS: bind9, Ubuntu:24.04:LTS: isc-dhcp and 2 more

If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in `named` results in a negative cache entry of 0 bytes. When this entry is subsequently read, `named` aborts. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3420 WID-SEC-W-2026-3420 — Internet Systems Consortium BIND: Mehrere Schwachstellen 2026-10-06T11:20:56.166304+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder Denial-of-Service-Zustände herbeizuführen.