Most recent entries from all

BELL-CVE-2026-5947

Affected: Alpaquita:23: bind, Alpaquita:25: bind, Alpaquita:stream: bind

certfr-2026-avi-0626 — De multiples vulnérabilités ont été découvertes dans ISC BIND. Elles permettent à un attaquant de provoquer un déni de…

certfr-2026-avi-0626

EUVD-2026-362293

fkie_cve-2026-5947

Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signed with SIG(0), it begins work to validate that signature. If, during that validation, the "recursive-clients" limit is reached (as would occur during a query flood), and that same DNS message is discarded per the limit, there is a brief window of time while the SIG(0) validation may attempt to read the now-discarded DNS message. This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, and 9.20.9-S1 through 9.20.22-S1. BIND 9 versions 9.18.28 through 9.18.49 and 9.18.28-S1 through 9.18.49-S1 are NOT affected.

GHSA-6mm6-m775-chpm

msrc_CVE-2026-5947 — SIG(0) validation during query flood may lead to undefined behavior

msrc_CVE-2026-5947

openSUSE-SU-2026:10874-1 — bind-9.20.23-1.1 on GA media

bind-9.20.23-1.1 on GA media

RHSA-2026:7412 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

bind: Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation bind: SIG(0) validation during query flood may lead to undefined behavior

SUSE-SU-2026:22198-1 — Security update for bind

Security update for bind

UBUNTU-CVE-2026-5947

Affected: Ubuntu:25.10: bind9, Ubuntu:26.04:LTS: bind9

WID-SEC-W-2026-1626 — Internet Systems Consortium BIND: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um eine Speicherbeschädigung auszulösen oder einen Denial-of-Service-Zustand zu verursachen.