Skip to content
OpenAdvisories
High WID-SEC-2026-4116 4 CVEs

Internet Systems Consortium BIND: Mehrere Schwachstellen

Published Oct 21, 2026 · Updated Nov 12, 2026 · Revision 11 · de

Vendor: amazon Vendor: Debian Vendor: Fedora Vendor: Internet Systems Consortium Vendor: NETAPP Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Product: AFF Product: BIND Product: Data ONTAP Product: Enterprise Linux Product: FAS Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: openSUSE Product: Rocky Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um einen Denial of Service Angriff durchzuführen oder möglicherweise beliebigen Code auszuführen.

Product

BIND (Berkeley Internet Name Domain) ist ein Open-Source-Softwarepaket, das einen Domain-Name-System-Server implementiert.

Vulnerabilities 4

  • High 8.1
    CVE-2026-94300 Public exploit

    Concurrent GSS-TSIG messages corrupt memory

    Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to a zone the attacker…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2026-19630

    Amplified resource exhaustion in inbound message processing

    In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate amo…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2026-96888

    Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization

    A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing the redirect. This issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2026-97313

    Specific RPZ configurations and query patterns may result in an unexpected exit

    A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion failure, resulting in a denial of service. To be vulnerable, the BIND server must allow recursive queries and have …

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi

Revision history

  1. #11

    Neue Updates von Fedora und Red Hat aufgenommen

  2. #10

    Neue Updates von Red Hat aufgenommen

  3. #9

    Neue Updates von Red Hat und openSUSE aufgenommen

  4. #8

    Neue Updates von Red Hat und Fedora aufgenommen

  5. #7

    Neue Updates von Red Hat aufgenommen

  6. #6

    Neue Updates von Oracle Linux und Red Hat aufgenommen

  7. #5

    Neue Updates von Red Hat aufgenommen

  8. #4

    Neue Updates von Oracle Linux, Red Hat und Rocky Enterprise Software Foundation aufgenommen

  9. #3

    Neue Updates von Red Hat, NetApp und Oracle Linux aufgenommen

  10. #2

    Neue Updates von Amazon aufgenommen

  11. #1

    Initiale Fassung

References