Security Bulletin: Multiple vulnerabilities impact AIX due to ISC BIND

Summary Vulnerabilities in ISC BIND: DNSSEC Validation /Integrity Bypass : CVE-2026-19033, CVE-2026-19941, CVE-2026-77119, Resolver Crash / Denial of Service : CVE-2026-19662, CVE-2026-19666, CVE-2026-19667, CVE-2026-80274, Resource Exhaustion CPU/Memory : CVE-2026-19668, CVE-2026-75029,...

Multiple vulnerabilities impact AIX due to ISC BIND

IBM SECURITY ADVISORY First Issued: Mon Nov 2 01:14:47 CST 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/bindadvisory32.asc Security Bulletin: Multiple vulnerabilities impact AIX due to ISC BIND...

CLEANSTART-2020-NG37788 There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode

Security vulnerability affects the dhcp package. There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode...

CLEANSTART-2025-XM99097 named in ISC BIND 9

Security vulnerability affects the bind package. named in ISC BIND 9...

CLEANSTART-2025-AB82867 named in ISC BIND 9

Security vulnerability affects the bind package. named in ISC BIND 9...

CLEANSTART-2025-RT76510 named in ISC BIND 9

Security vulnerability affects the bind package. named in ISC BIND 9...

ISC BIND 9 9.21.26 Release Exposure Detector

ISC BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, and 9.21.0 through 9.21.26 contain a GSS-TSIG message replay memory-corruption vulnerability. This offline tool assesses supplied BIND release inventories against the recorded affected ranges...

CVE-2026-94300

creationtimestamp| type| source ---|---|--- 2026-10-21 08:36:39+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-isc-bind-9-1 2026-10-21 11:48:12+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/isc-bind-security-advisory-av26-1072 2026-10-21 17:59:11+00:00| seen|...

CVE-2026-97313

creationtimestamp| type| source ---|---|--- 2026-10-21 08:36:39+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-isc-bind-9-1 2026-10-21 11:48:12+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/isc-bind-security-advisory-av26-1072 2026-10-21 18:01:53+00:00| seen|...

CVE-2026-96888

creationtimestamp| type| source ---|---|--- 2026-10-21 08:36:39+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-isc-bind-9-1 2026-10-21 11:48:12+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/isc-bind-security-advisory-av26-1072 2026-10-21 17:59:52+00:00| seen|...

CVE-2026-19630

creationtimestamp| type| source ---|---|--- 2026-10-21 08:36:39+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-isc-bind-9-1 2026-10-21 11:48:12+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/isc-bind-security-advisory-av26-1072 2026-10-21 17:58:31+00:00| seen|...

ISC BIND 9 resource management error vulnerability

Versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1 of ISC BIND contain a resource management error vulnerability. This vulnerability arises because the BIND resolver fails to restrict additional processin...

ISC BIND 9 race condition vulnerabilities

Security vulnerabilities exist in ISC BIND versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1. These vulnerabilities stem from the ability to replay signed UDP messages with GSS-TSIG signatures, which can...

Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added five security flaws to its Known Exploited Vulnerabilities KEV catalog, following their abuse by a China-linked threat actor known as Flax Typhoon. The vulnerabilities in question are listed below - CVE-2015-3306 CVS...

ISC BIND Data Processing Errors Vulnerability

ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries...

CVE-2026-19941

creationtimestamp| type| source ---|---|--- 2026-09-18 04:45:38+00:00| seen| https://www.hkcert.org/security-bulletin/isc-bind-multiple-vulnerabilities20260918...

CVE-2026-19668

creationtimestamp| type| source ---|---|--- 2026-09-18 04:45:37+00:00| seen| https://www.hkcert.org/security-bulletin/isc-bind-multiple-vulnerabilities20260918...

CVE-2026-19662

creationtimestamp| type| source ---|---|--- 2026-09-18 04:45:32+00:00| seen| https://www.hkcert.org/security-bulletin/isc-bind-multiple-vulnerabilities20260918...

ISC BIND 9.20.0 < 9.20.29 / 9.20.9-S1 < 9.20.29-S1 / 9.21.0 < 9.21.26 DoS (CVE-2026-77692)

The version of ISC BIND running on the remote host is 9.20.0 through 9.20.27 or 9.21.0 through 9.21.25. Supported Preview Edition releases 9.20.9-S1 through 9.20.27-S1 are also affected. It is, therefore, affected by a vulnerability : - An attacker can cause named to abort by sending a crafted...

ISC BIND 9.18.0 < 9.20.29 / 9.18.11-S1 < 9.20.29-S1 / 9.20.0 < 9.20.29 / 9.20.9-S1 < 9.20.29-S1 / 9.21.0 < 9.21.26 Multiple Vulnerabilities

The version of ISC BIND running on the remote host is 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, or 9.21.0 through 9.21.25. Supported Preview Edition releases 9.18.11-S1 through 9.18.50-S1 and 9.20.9-S1 through 9.20.27-S1 are also affected. It is, therefore, affected by multiple...