K000163234: BIND vulnerability CVE-2026-11331

Security Advisory Description An attacker who knows or guesses that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may...

F5 Networks BIG-IP : BIND vulnerability (K000163234)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000163234 advisory. An attacker who knows or guesses that a resolver uses RPZ with wildcard CNAME policies can craft query names long enou...

Oracle Linux 8 : bind9.16 (ELSA-2026-54509)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54509 advisory. - Fix NSEC3 signer validation CVE-2026-10723 - Reject out-of-zone NSEC next owner names CVE-2026-13321 - Fix CVE-2026-11622: reference-counted DNS cac...

bind9.16 security update

32:9.16.23-0.22.12 - Fix NSEC3 signer validation CVE-2026-10723 - Resolves: RHEL-213499 32:9.16.23-0.22.11 - Reject out-of-zone NSEC next owner names CVE-2026-13321 - Resolves: RHEL-213313 32:9.16.23-0.22.10 - Fix CVE-2026-11622: reference-counted DNS cache slab headers - Resolves: RHEL-213396...

Security update for bind

This update for bind fixes the following issues: CVE-2026-10723: accepting incorrect child-zone NSEC3 records as valid can allow an attacker to forge authenticated NXDOMAIN responses for sibling zones bsc1271982. CVE-2026-10822: storing a DNS key record with an invalid PRIVATEDNS algorithm...

Linux Distros Unpatched Vulnerability : CVE-2026-11331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker who knows or guesses that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error conditio...

AZL-93129 CVE-2026-11331 affecting package bind for versions less than 9.20.26-1

An attacker who knows or guesses that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may lead to an unexpected exit of...