11 matches found
RLSA-2026:55437 Important: bind security update
The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...
bind9.18 security update
32:9.18.29-14.8 - Fix NSEC3 signer validation CVE-2026-10723, RHEL-215704 32:9.18.29-14.7 - Reject out-of-zone NSEC next owner names CVE-2026-13321, RHEL-213314 32:9.18.29-14.6 - Fix cache exhaustion via dnsslabheaders CVE-2026-11622, RHEL-213389 32:9.18.29-14.5 - Reject invalid signed wildcard...
Photon OS 5.0: Bindutils PHSA-2026-5.0-92-0956
An update of the bindutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0956. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Updated bind packages fix security vulnerabilities
Updated bind packages fix security vulnerabilities: Incorrect acceptance of NSEC3 records. CVE-2026-10723 Key Record using PRIVATEDNS algorithm may lead to unexpected exit. CVE-2026-10822 Potential wildcard CNAME RPZ policy bypass. CVE-2026-11331 Unnecessary validation of DNSSEC signed records...
SUSE-SU-2026:3554-1 Security update for bind
This update for bind fixes the following issues: - CVE-2026-10723: incorrect acceptance of NSEC3 records bsc1271982. - CVE-2026-11331: potential wildcard CNAME RPZ policy bypass bsc1271984. - CVE-2026-11622: potential memory usage beyond configured limits bsc1271986. - CVE-2026-11721: cache...
SUSE SLES15 Security Update : bind (SUSE-SU-2026:3477-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3477-1 advisory. This update for bind fixes the following issues - CVE-2026-10723: Incorrect acceptance of NSEC3 records bsc1271982. - CVE-2026-1133...
SUSE-SU-2026:3452-1 Security update for bind
This update for bind fixes the following issues: - CVE-2026-10723: accepting incorrect child-zone NSEC3 records as valid can allow an attacker to forge authenticated NXDOMAIN responses for sibling zones bsc1271982. - CVE-2026-10822: storing a DNS key record with an invalid PRIVATEDNS algorithm...
openSUSE 16: bind / bind-modules-bdbhpt / bind-modules-generic / etc (openSUSE-SU-2026:21489-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21489-1 advisory. This update for bind fixes the following issues - Upgrade to release 9.20.26 - CVE-2026-10723: Incorrect acceptance of NSEC3 records bsc1271982....
CVE-2026-11331 affecting package bind for versions less than 9.20.26-1
CVE-2026-11331 affecting package bind for versions less than 9.20.26-1. An upgraded version of the package is available that resolves this issue...
Linux Distros Unpatched Vulnerability : CVE-2026-11331
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker who knows or guesses that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error conditio...
CVE-2026-11331
creationtimestamp| type| source ---|---|--- 2026-07-22 16:47:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrarlpzzf32u 2026-07-22 19:01:40+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mraz4gyvek2o...