413 matches found
bind: bind9: Unexpected exit with NSEC and NSEC3 both present
If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof...
Important: bind9.16 security update
The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...
ALSA-2026:54509 Important: bind9.16 security update
The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...
bind: bind9: Unexpected exit with NSEC and NSEC3 both present
If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof...
SUSE SLED15 / SLES15 Security Update : bind (SUSE-SU-2026:3554-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3554-1 advisory. - CVE-2026-10723: incorrect acceptance of NSEC3 records bsc1271982. - CVE-2026-11331: potential wildcard CNAME...
EulerOS 2.0 SP11 : bind (EulerOS-SA-2026-3058)
According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone...
EulerOS 2.0 SP11 : bind (EulerOS-SA-2026-3113)
According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone...
Security Bulletin: Vulnerability in Bind affects IBM Netezza Appliance
Summary The Bind package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-11605 Vulnerability Details CVEID:CVE-2026-11605 DESCRIPTION: The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all...
EulerOS 2.0 SP13 : dnsmasq (EulerOS-SA-2026-2963)
According to the versions of the dnsmasq packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Denial of Service DoS vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS...
Security Bulletin: Vulnerability in BIND (CVE-2026-1519) affects AIX/ VIOS.
Summary When a BIND 9 resolver performs DNSSEC validation on a maliciously crafted DNS zone, an attacker can trigger excessive NSEC3 iterations during insecure delegation validation. This causes the named process to consume excessive CPU resources, potentially making the resolver unavailable...
SUSE SLES15 Security Update : bind (SUSE-SU-2026:3476-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3476-1 advisory. This update for bind fixes the following issues - CVE-2026-10723: Incorrect acceptance of NSEC3 records bsc1271982. - CVE-2026-1133...
RLSA-2023:2771 Moderate: unbound security and bug fix update
The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: NRDelegation attack leads to uncontrolled resource consumption Non-Responsive Delegation Attack CVE-2022-3204 For more details about the security issues, including the impact, a CVSS...
Amazon Linux 2 : unbound, --advisory ALAS2UNBOUND-1.17-2026-009 (ALASUNBOUND-1.17-2026-009)
The version of unbound installed on the remote host is prior to 1.17.0-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2UNBOUND-1.17-2026-009 advisory. In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field...
Amazon Linux 2 : bind, --advisory ALAS2-2026-3854 (ALAS-2026-3854)
The version of bind installed on the remote host is prior to 9.11.4-26.P2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3854 advisory. BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMA...
Security update for bind
This update for bind fixes the following issues CVE-2026-10723: incorrect acceptance of NSEC3 records bsc1271982. CVE-2026-11331: potential wildcard CNAME RPZ policy bypass bsc1271984. CVE-2026-11622: potential memory usage beyond configured limits bsc1271986. CVE-2026-11721: cache poisoning...
SUSE-SU-2026:3476-1 Security update for bind
This update for bind fixes the following issues - CVE-2026-10723: Incorrect acceptance of NSEC3 records bsc1271982. - CVE-2026-11331: Potential wildcard CNAME RPZ policy bypass bsc1271984. - CVE-2026-11622: Potential memory usage beyond configured limits bsc1271986. - CVE-2026-11721: Cache...
K000162286: BIND vulnerability CVE-2026-1519
Security Advisory Description If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive...
numa v0.22.0
Numa DNS you own. Everywhere you go. — numa.rs A portable DNS resolver in a single binary. Block ads on any network, name your local services frontend.numa, override any hostname with auto-revert, and seal every outbound query with ODoH RFC 9230 so no single party sees both who you are and what y...
CVE-2026-52686: Improper Verification of Cryptographic Signature
The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...
AZL-93117 CVE-2026-13204 affecting package bind for versions less than 9.20.26-1
If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through...