UBUNTU-CVE-2026-3039

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or...

The vulnerability of the Bind9 DNS server package lies in the lack of use of the assert() function, which allows a attacker to cause a service failure.

The vulnerability of the Bind9 DNS server package is related to the lack of use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures...