Oracle Linux 9 : bind9.18 (ELSA-2026-89746)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-89746 advisory. 32:9.18.29-14.11 - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. Tenable has extracted the preceding description block...

bind9.18 security update

32:9.18.29-14.11 - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver...

CLSA-2026-1790583590 bind: Fix of 3 CVEs

CVE-2026-19666: clear the NOQNAME proof alias on the DNS64 filter64 path in queryfind, so queryaddnoqnameproof no longer dereferences the rdataset that queryfilter64 has already returned to the message rdataset pool - CVE-2026-19667: reject negative cache records that do not fit in a dnsrdatat;...

CLSA-2026-1790090221 bind: Fix of 3 CVEs

CVE-2026-19666: clear the NOQNAME proof alias on the DNS64 filter64 path in queryfind, so queryaddnoqnameproof no longer dereferences the rdataset that queryfilter64 had already returned to the message rdataset pool - CVE-2026-19667: reject negative cache records that do not fit in a dnsrdatat; a...

CLSA-2026-1790003616 bind: Fix of 3 CVEs

CVE-2026-19666: clear the NOQNAME proof alias on the DNS64 filter64 path in queryfind, so queryaddnoqnameproof no longer dereferences the rdataset that queryfilter64 had already returned to the message rdataset pool - CVE-2026-19667: reject negative cache records that do not fit in a dnsrdatat; a...

CVE-2026-80274

BIND 9 validating resolvers are affected by a bug where the resolver can abort (unexpected program exit) while caching a mismatched NOQNAME proof . Specifically, when querying a DNSSEC-signed authoritative zone , a response containing a valid wildcard answer with a signed NSEC3 proof followed by ...

CVE-2026-19662 qpcache NOQNAME proof use-after-free crashes recursive resolver

An attacker may be able to cause a named resolver to abort. The attack requires inducing the victim resolver to send multiple queries for a DNSSEC-signed zone hosted by an authoritative server under the control of the attacker. If the auth responds with a particular sequence of crafted answers, a...