The vulnerability of the BIND DNS server, related to resource release errors, allows a hacker to cause a service failure.

🗓️ 29 Jun 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 18 Views

The Domain Name System vulnerability due to resource release errors can cause service failures.

Reporter	Title	Published	Views	Family All 123
IBM Security Bulletins	Security Bulletin: Vulnerability in BIND (CVE-2026-3592, CVE-2026-5946) affects AIX/ VIOS.	3 Jul 202611:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in DNS [CVE-2026-3039, CVE-2026-3592, CVE-2026-5946]	7 Aug 202615:42	–	ibm
attackerkb	CVE-2026-3592	20 May 202613:09	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : bind, bind-chroot, bind-devel (ALAS2023-2026-1755)	26 May 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : bind, --advisory ALAS2-2026-3353 (ALAS-2026-3353)	8 Jun 202600:00	–	nessus
Tenable Nessus	ISC BIND 9.11.0 < 9.18.49 / 9.11.3-S1 < 9.18.49-S1 / 9.18.0 < 9.18.49 / 9.18.11-S1 < 9.18.49-S1 / 9.20.0 < 9.20.23 / 9.20.9-S1 < 9.20.23-S1 / 9.21.0 < 9.21.22 Vulnerability (cve-2026-3592)	20 May 202600:00	–	nessus
Tenable Nessus	Rocky Linux 8.6 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (ciqsa-2026_1378)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (ciqsa-2026_1377)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.4 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (ciqsa-2026_1376)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.6 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (ciqsa-2026_1375)	1 Oct 202600:00	–	nessus

Vulners

Node

OR

red_hat,red_hat_openshift_container_platformMatch4

internet_systems_consortium bindRange9.11.0–9.16.50

internet_systems_consortium bindRange9.18.0–9.18.49

internet_systems_consortium bindRange9.20.0–9.20.23

internet_systems_consortium bindRange9.21.0–9.21.22

red_hat,red_hat_enterprise_linuxMatch6

red_hat,red_hat_enterprise_linuxMatch7

red_hat,red_hat_enterprise_linuxMatch8

red_hat,red_hat_enterprise_linuxMatch9

red_hat,red_hat_enterprise_linuxMatch10

canonical ubuntuMatch25.10

Source	Link
kb	www.kb.isc.org/docs/cve-2026-3592
access	www.access.redhat.com/security/cve/cve-2026-3592
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-3592
ubuntu	www.ubuntu.com/security/CVE-2026-3592
altsp	www.altsp.su/obnovleniya-bezopasnosti/
web	www.web.nvd.nist.gov/view/vuln/detail

16 Jul 2026 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 25

CVSS 35.3

EPSS0.00406

Domain Name System resource release errors service failures