Skip to content
OpenAdvisories
High ALSA-2026:8312 1 CVE

Important: bind security update

Published Apr 15, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 2

ReleasePackageFixed in
AlmaLinux · 10 bind-doc 32:9.18.33-10.el10_1.3
AlmaLinux · 10 bind-license 32:9.18.33-10.el10_1.3

Vulnerabilities 1

  • High 7.5
    CVE-2026-1519

    Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

    If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make re…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-1519
  • report
    https://bugzilla.redhat.com/2451305
  • advisory
    https://errata.almalinux.org/10/ALSA-2026-8312.html