Most recent entries from all

ALSA-2026:7915 — Important: bind9.18 security update

Affected: AlmaLinux:9: bind9.18, AlmaLinux:9: bind9.18-chroot, AlmaLinux:9: bind9.18-devel, AlmaLinux:9: bind9.18-dnssec-utils, AlmaLinux:9: bind9.18-doc, AlmaLinux:9: bind9.18-libs, AlmaLinux:9: bind9.18-utils

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

* bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2026-08885

BELL-CVE-2026-1519

Affected: Alpaquita:23: bind, Alpaquita:25: bind, Alpaquita:stream: bind

certfr-2026-avi-0360 — De multiples vulnérabilités ont été découvertes dans ISC BIND. Elles permettent à un attaquant de provoquer un déni de…

certfr-2026-avi-0360

EUVD-2026-370207

fkie_cve-2026-1519

If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries). This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.

GHSA-84m6-p53c-x4wp

msrc_CVE-2026-1519 — Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

msrc_CVE-2026-1519

OESA-2026-2058 — bind security update

Affected: openEuler:22.03-LTS-SP4: bind

openSUSE-SU-2026:10448-1 — bind-9.20.21-1.1 on GA media

bind-9.20.21-1.1 on GA media

RHSA-2026:11372 — Red Hat Security Advisory: bind security update

bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone

SUSE-SU-2026:1209-1 — Security update for bind

Security update for bind

UBUNTU-CVE-2026-1519

Affected: Ubuntu:Pro:14.04:LTS: bind9, Ubuntu:Pro:16.04:LTS: bind9, Ubuntu:Pro:18.04:LTS: bind9, Ubuntu:18.04:LTS: isc-dhcp, Ubuntu:Pro:20.04:LTS: bind9, Ubuntu:20.04:LTS: bind9-libs, Ubuntu:22.04:LTS: bind9, Ubuntu:22.04:LTS: bind9-libs, Ubuntu:24.04:LTS: bind9, Ubuntu:24.04:LTS: isc-dhcp and 3 more

WID-SEC-W-2026-0863 — Internet Systems Consortium BIND: Mehrere Schwachstellen

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsmaßnahmen zu umgehen.