Record ordering based unexpected exit with CNAME or DNAME

...

CVE-2026-52686 Wildcard CNAME proof validation bypass

The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...

CVE-2026-52686

The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...

CVE-2026-12617

The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A...

bind: assertion failure while handling responses containing a DNAME answer

A denial of service flaw was found in the way BIND handled responses containing a DNAME answer. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

bind: assertion failure while handling responses containing a DNAME answer

A denial of service flaw was found in the way BIND handled responses containing a DNAME answer. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

DNAME Denial of Service Vulnerability in ISC BIND 9

BIND is an open source suite of software for implementing the DNS protocol. A DNAME denial of service vulnerability exists in ISC BIND 9. When processing a recursive response packet containing a specially crafted DNAME answer, it can cause the target resolver to assert a failed exit. An attacker...