AlmaLinux 9 : bind9.18 (ALSA-2026:75578)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:75578 advisory. bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records CVE-2026-81736 bind9: bind: BIND 9: Denial of Service via 16-bit length...

ALSA-2026:85848 Important: rust-sequoia-sq security update

Command-line frontends for Sequoia. Security Fixes: hickory-resolver: hickory-resolver: DNSSEC validation bypass allows forged DNS records CVE-2026-93657 rustls-webpki: rustls-webpki: Denial of Service via crafted Certificate Revocation List CVE-2026-93599 For more details about the security...

RHEL 10 : rust-sequoia-sq (RHSA-2026:85848)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:85848 advisory. Command-line frontends for Sequoia. Security Fixes: hickory-resolver: hickory-resolver: DNSSEC validation bypass allows forged DNS records...

CentOS Linux 7 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-export-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1791226662)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1791226662 advisory. - If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of thes...

MiracleLinux 9 : bind-9.16.23-40.el9_8.10 (AXSA:2026-2017:12)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2017:12 advisory. bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling CVE-2026-19667 bind: BIND: Denial of Service via...

Fedora 44 : bind / bind-dyndb-ldap (2026-a5b5298a84)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-a5b5298a84 advisory. Security updates using git snapshot Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git...

RHEL 8 : bind9.16 (RHSA-2026:80501)

"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:80501 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

CLSA-2026-1791261872 unbound: Fix of 4 CVEs

CVE-2026-81634: bounds-check the scratch buffer in rrsetcanonical and rrsetcanonicalizetobuffer before writing the RRSIG rdata, the first canonical owner name and each RR's rdata, so a large rrset can no longer be written past the end of the buffer - CVE-2026-80225: cap the number of pipelined...

Fedora 46 : bind / bind-dyndb-ldap (2026-56974571ee)

The remote Fedora 46 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-56974571ee advisory. Security updates using git snapshot Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Bind vulnerabilities (USN-8929-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8929-1 advisory. Zuyao Xu and Xiang Li discovered that Bind incorrectly handled certain malformed...

MiracleLinux 9 : bind9.18-9.18.29-14.el9_8.10 (AXSA:2026-2081:06)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2081:06 advisory. bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records CVE-2026-81736 bind9: bind: BIND 9: Denial of Service via 16-bit leng...

CLSA-2026-1792089817 Fix CVE(s): CVE-2026-13321, CVE-2026-19666, CVE-2026-80274

SECURITY UPDATE: DNSSEC validation bypass via an out-of-zone NSEC Next Domain Name - debian/patches/CVE-2026-13321.patch: reject an NSEC RRset whose next owner name is not a subdomain of the RRSIG signer name in dnsdnssecverify3 in lib/dns/dnssec.c. - CVE-2026-13321 SECURITY UPDATE: assertion...

CLSA-2026-1792083184 Fix CVE(s): CVE-2026-13321, CVE-2026-19666, CVE-2026-80274

SECURITY UPDATE: DNSSEC validation bypass via an out-of-zone NSEC Next Domain Name - debian/patches/CVE-2026-13321.patch: reject an NSEC RRset whose next owner name is not a subdomain of the RRSIG signer name in dnsdnssecverify3 in lib/dns/dnssec.c. - CVE-2026-13321 SECURITY UPDATE: assertion...

SUSE SLES15 Security Update : bind (SUSE-SU-2026:4664-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4664-1 advisory. - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification bsc1280430. - CVE-2026-19662:...

K000163710: BIND vulnerability CVE-2026-10723

Security Advisory Description BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through...

USN-8929-1 bind9 vulnerabilities

Zuyao Xu and Xiang Li discovered that Bind incorrectly handled certain malformed DNSKEY records. A remote attacker could possibly use this issue to cause Bind to consume resources, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS...

USN-8929-1: Bind vulnerabilities

Zuyao Xu and Xiang Li discovered that Bind incorrectly handled certain malformed DNSKEY records. A remote attacker could possibly use this issue to cause Bind to consume resources, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS...

Important: systemd

Issue Overview: Amazon Linux–vended DNS resolvers shipped with an older DNSSEC root signing key. For hosts configured with DNSSEC validation enabled, this could result in DNS resolution failures, including for names in unsigned zones. This applies where the resolver is still using the trust ancho...

Important: bind

Issue Overview: Amazon Linux–vended DNS resolvers shipped with an older DNSSEC root signing key. For hosts configured with DNSSEC validation enabled, this could result in DNS resolution failures, including for names in unsigned zones. This applies where the resolver is still using the trust ancho...

Important: dnsmasq

Issue Overview: Amazon Linux–vended DNS resolvers shipped with an older DNSSEC root signing key. For hosts configured with DNSSEC validation enabled, this could result in DNS resolution failures, including for names in unsigned zones. This applies where the resolver is still using the trust ancho...