PT-2026-42164

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.20.0 through 9.20.22 BIND 9 versions 9.21.0 through 9.21.21 BIND 9 versions 9.20.9-S1 through 9.20.22-S1 Description A race condition occurs when BIND receives an incoming DNS message signed with SIG0. While validating the...

CoreDNS TSIG authentication bypass on encrypted DNS transports

...

SUSE CVE-2026-43864

mutt before 2.3.2 has a showsigsummary NULL pointer dereference...

UBUNTU-CVE-2026-43864

mutt before 2.3.2 has a showsigsummary NULL pointer dereference...

CVE-2026-43864

mutt before 2.3.2 has a showsigsummary NULL pointer dereference...

CVE-2026-43864

mutt before 2.3.2 has a showsigsummary NULL pointer dereference...

CVE-2026-43864

Affected product: mutt. Vulnerability: show_sig_summary NULL pointer dereference in mutt before 2.3.2. Root cause: NULL pointer dereference in show_sig_summary. Impact: low (CVSS: LOW, LOCAL, user interaction required). References indicate a fix in the project history (commit linked). Remediation...

CVE-2026-43864

mutt before 2.3.2 has a showsigsummary NULL pointer dereference...

CVE-2026-43864

mutt before 2.3.2 has a showsigsummary NULL pointer dereference...

[SECURITY] Fedora 44 Update: kwin-x11-6.6.4-1.fc44

Alternative version of the KDE Window Manager KWin using the legacy X11 win dow system instead of the default Wayland. This version of KWin is required by plasma-workspace-x11, which provides the "Plasma X11" session type. This version is maintained by individual Fedora packagers and NOT supporte...

SUSE-SU-2026:1351-1 Security update for bind

This update for bind fixes the following issues: Security issues: - CVE-2026-1519: maliciously crafted DNSSEC-validated zone can lead to denial of service bsc1260805. - CVE-2026-3104: memory leak in code preparing DNSSEC proofs of non-existence allows for DoS bsc1260567. - CVE-2026-3119:...

bind: SIG(0) validation during query flood may lead to undefined behavior

A flaw was found in BIND. A remote attacker could exploit a race condition during SIG0 signature validation of an incoming DNS message. If the "recursive-clients" limit is reached and the message is discarded, a use-after-free vulnerability may occur. This could lead to undefined behavior and...

SUSE CVE-2026-3591

A use-after-return vulnerability exists in the named server when handling DNS queries signed with SIG0. Using a specially-crafted DNS request, an attacker may be able to cause an ACL to improperly mismatch an IP address. In a default-allow ACL denying only specific IP addresses, this may lead to...

USN-8124-1 bind9 vulnerabilities

Samy Medjahed discovered that Bind incorrectly handled insecure delegation validation. A remote attacker could possibly use this issue to cause excessive NSEC3 iterations, consuming CPU resources, and leading to a denial of service. CVE-2026-1519 Vitaly Simonovich discovered that Bind incorrectly...

EUVD-2026-15413

A use-after-return vulnerability exists in the named server when handling DNS queries signed with SIG0. Using a specially-crafted DNS request, an attacker may be able to cause an ACL to improperly mismatch an IP address. In a default-allow ACL denying only specific IP addresses, this may lead to...

DEBIAN-CVE-2026-3591

A use-after-return vulnerability exists in the named server when handling DNS queries signed with SIG0. Using a specially-crafted DNS request, an attacker may be able to cause an ACL to improperly mismatch an IP address. In a default-allow ACL denying only specific IP addresses, this may lead to...

CVE-2026-3591

A use-after-return vulnerability exists in the named server when handling DNS queries signed with SIG0. Using a specially-crafted DNS request, an attacker may be able to cause an ACL to improperly mismatch an IP address. In a default-allow ACL denying only specific IP addresses, this may lead to...

ALPINE-CVE-2026-3591

A use-after-return vulnerability exists in the named server when handling DNS queries signed with SIG0. Using a specially-crafted DNS request, an attacker may be able to cause an ACL to improperly mismatch an IP address. In a default-allow ACL denying only specific IP addresses, this may lead to...

AZL-80987 CVE-2026-3591 affecting package bind for versions less than 9.20.21-1

A use-after-return vulnerability exists in the named server when handling DNS queries signed with SIG0. Using a specially-crafted DNS request, an attacker may be able to cause an ACL to improperly mismatch an IP address. In a default-allow ACL denying only specific IP addresses, this may lead to...

CVE-2026-3591

A use-after-return vulnerability exists in the named server when handling DNS queries signed with SIG0. Using a specially-crafted DNS request, an attacker may be able to cause an ACL to improperly mismatch an IP address. In a default-allow ACL denying only specific IP addresses, this may lead to...